{"id":"CVE-2019-13296","aliases":["ALPINE-CVE-2019-13296","EUVD-2019-4801","GHSA-vc88-f7p6-j84m","SUSE-SU-2019:2106-1","openSUSE-SU-2019:1983-1","openSUSE-SU-2024:11564-1"],"status":"published","title":"ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in...","description":"ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02131,"percentile":0.82119,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401"],"published":"2019-07-05T00:50:58Z","modified":"2026-11-03T06:31:49Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"imagemagick","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"imagemagick","fixed_in":["7.0.8.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"imagemagick","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"imagemagick","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.10","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"imagemagick6","fixed_in":["6.9.10.53-r0"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.10","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"imagemagick6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.53-r0"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-3.67.1"}]}],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp151.7.9.1"}]}],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.7.34-lp151.7.9.1"}]}],"bundled":30},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0.9-1.1"}]}],"bundled":26}],"products":[{"vendor":"imagemagick","product":"imagemagick"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/issues/1604","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/ce08a3691a8ac29125e29fc41967b3737fa3f425","tags":["x_refsource_MISC","x_transferred","Patch","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-13296"},{"url":"https://github.com/advisories/GHSA-vc88-f7p6-j84m"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-13296","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192106-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1139884","tags":["report"]},{"url":"https://bugzilla.suse.com/1139885","tags":["report"]},{"url":"https://bugzilla.suse.com/1139886","tags":["report"]},{"url":"https://bugzilla.suse.com/1140100","tags":["report"]},{"url":"https://bugzilla.suse.com/1140102","tags":["report"]},{"url":"https://bugzilla.suse.com/1140103","tags":["report"]},{"url":"https://bugzilla.suse.com/1140104","tags":["report"]},{"url":"https://bugzilla.suse.com/1140105","tags":["report"]},{"url":"https://bugzilla.suse.com/1140106","tags":["report"]},{"url":"https://bugzilla.suse.com/1140110","tags":["report"]},{"url":"https://bugzilla.suse.com/1140111","tags":["report"]},{"url":"https://bugzilla.suse.com/1140501","tags":["report"]},{"url":"https://bugzilla.suse.com/1140513","tags":["report"]},{"url":"https://bugzilla.suse.com/1140520","tags":["report"]},{"url":"https://bugzilla.suse.com/1140534","tags":["report"]},{"url":"https://bugzilla.suse.com/1140538","tags":["report"]},{"url":"https://bugzilla.suse.com/1140543","tags":["report"]},{"url":"https://bugzilla.suse.com/1140545","tags":["report"]},{"url":"https://bugzilla.suse.com/1140547","tags":["report"]},{"url":"https://bugzilla.suse.com/1140549","tags":["report"]},{"url":"https://bugzilla.suse.com/1140552","tags":["report"]},{"url":"https://bugzilla.suse.com/1140554","tags":["report"]},{"url":"https://bugzilla.suse.com/1140664","tags":["report"]},{"url":"https://bugzilla.suse.com/1140665","tags":["report"]},{"url":"https://bugzilla.suse.com/1140666","tags":["report"]},{"url":"https://bugzilla.suse.com/1140667","tags":["report"]},{"url":"https://bugzilla.suse.com/1140668","tags":["report"]},{"url":"https://bugzilla.suse.com/1140669","tags":["report"]},{"url":"https://bugzilla.suse.com/1140673","tags":["report"]},{"url":"https://bugzilla.suse.com/1141171","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12975","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12977","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13133","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13134","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13295","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13297","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13310","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13454","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YNM2LVHZUR2GCLOOK3NWALHSAJQKCA67/#YNM2LVHZUR2GCLOOK3NWALHSAJQKCA67","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-15139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16710","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19949","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-7398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20246","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20312","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-13296","description":"ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value.","status":"published","published":"2019-07-05T00:50:58Z","modified":"2024-08-04T23:49:24.599Z","updated_at":"2026-11-02T14:20:24.357095Z"}],"euvd":[{"id":"EUVD-2019-4801","description":"ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value.","status":"published","published":"2019-07-05T00:50:58Z","modified":"2024-08-04T23:49:24Z","updated_at":"2026-11-03T02:40:42.893368Z"}],"ghsa":[{"id":"GHSA-vc88-f7p6-j84m","title":"ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in...","description":"ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value.","status":"published","published":"2022-05-24T16:49:34Z","modified":"2023-03-02T18:30:32Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:54:15.627441Z"}],"nvd":[{"id":"CVE-2019-13296","description":"ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value.","status":"published","published":"2019-07-05T01:15:09.983Z","modified":"2026-06-17T02:16:30.193Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:05:19.195714Z"}],"osv":[{"id":"ALPINE-CVE-2019-13296","description":"ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value.","status":"published","published":"2019-07-05T01:15:09.983Z","modified":"2026-11-03T06:31:49.229278208Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:18:15.355745Z"},{"id":"CVE-2019-13296","description":"ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value.","status":"published","published":"2019-07-05T01:15:09.983Z","modified":"2026-10-24T14:20:23.607984974Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:11.029493Z"},{"id":"openSUSE-SU-2019:1983-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory() (bsc#1140554).\n- CVE-2019-13309: Fixed a memory leak at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages (bsc#1140520).\n- CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c (bsc#1140501).\n- CVE-2019-13311: Fixed a memory leak at AcquireMagickMemory because of a wand/mogrify.c error (bsc#1140513).\n- CVE-2019-13303: Fixed a heap-based buffer over-read in MagickCore/composite.c in CompositeImage (bsc#1140549).\n- CVE-2019-13296: Fixed a memory leak in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c (bsc#1140665).\n- CVE-2019-13299: Fixed a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel (bsc#1140668).\n- CVE-2019-13454: Fixed a division by zero in RemoveDuplicateLayers in MagickCore/layer.c (bsc#1141171).\n- CVE-2019-13295: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140664).\n- CVE-2019-13297: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140666).\n- CVE-2019-12979: Fixed the use of uninitialized values in SyncImageSettings() (bsc#1139886).\n- CVE-2019-13391: Fixed a heap-based buffer over-read in MagickCore/fourier.c (bsc#1140673).\n- CVE-2019-13308: Fixed a heap-based buffer overflow in MagickCore/fourier.c (bsc#1140534).\n- CVE-2019-13302: Fixed a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages (bsc#1140552).\n- CVE-2019-13298: Fixed a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo (bsc#1140667).\n- CVE-2019-13300: Fixed a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages (bsc#1140669).\n- CVE-2019-13307: Fixed a heap-based buffer overflow at MagickCore/statistic.c (bsc#1140538).\n- CVE-2019-12977: Fixed the use of uninitialized values in WriteJP2Imag() (bsc#1139884).\n- CVE-2019-12975: Fixed a memory leak in the WriteDPXImage() in coders/dpx.c (bsc#1140106).\n- CVE-2019-13135: Fixed the use of uninitialized values in ReadCUTImage() (bsc#1140103).\n- CVE-2019-12978: Fixed the use of uninitialized values in ReadPANGOImage() (bsc#1139885).\n- CVE-2019-12974: Fixed a NULL pointer dereference in the ReadPANGOImage() (bsc#1140111).\n- CVE-2019-13304: Fixed a stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140547).\n- CVE-2019-13305: Fixed one more stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140545).\n- CVE-2019-13306: Fixed an additional stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140543).\n- CVE-2019-13133: Fixed a memory leak in the ReadBMPImage() (bsc#1140100).\n- CVE-2019-13134: Fixed a memory leak in the ReadVIFFImage() (bsc#1140102).\n- CVE-2019-13137: Fixed a memory leak in the ReadPSImage() (bsc#1140105).\n- CVE-2019-13136: Fixed a integer overflow vulnerability in the TIFFSeekCustomStream() (bsc#1140104).\n- CVE-2019-12976: Fixed a memory leak in the ReadPCLImage() in coders/pcl.c(bsc#1140110).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-08-21T08:22:04Z","modified":"2025-05-07T18:10:33.620909Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:11564-1","title":"ImageMagick-7.1.0.9-1.1 on GA media","description":"These are all security issues fixed in the ImageMagick-7.1.0.9-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:20:10.637085Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:2106-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory() (bsc#1140554).\n- CVE-2019-13309: Fixed a memory leak at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages (bsc#1140520).\n- CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c (bsc#1140501).\n- CVE-2019-13311: Fixed a memory leak at AcquireMagickMemory because of a wand/mogrify.c error (bsc#1140513).\n- CVE-2019-13303: Fixed a heap-based buffer over-read in MagickCore/composite.c in CompositeImage (bsc#1140549).\n- CVE-2019-13296: Fixed a memory leak in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c (bsc#1140665).\n- CVE-2019-13299: Fixed a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel (bsc#1140668).\n- CVE-2019-13454: Fixed a division by zero in RemoveDuplicateLayers in MagickCore/layer.c (bsc#1141171).\n- CVE-2019-13295: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140664).\n- CVE-2019-13297: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140666).\n- CVE-2019-12979: Fixed the use of uninitialized values in SyncImageSettings() (bsc#1139886).\n- CVE-2019-13391: Fixed a heap-based buffer over-read in MagickCore/fourier.c (bsc#1140673).\n- CVE-2019-13308: Fixed a heap-based buffer overflow in MagickCore/fourier.c (bsc#1140534).\n- CVE-2019-13302: Fixed a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages (bsc#1140552).\n- CVE-2019-13298: Fixed a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo (bsc#1140667).\n- CVE-2019-13300: Fixed a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages (bsc#1140669).\n- CVE-2019-13307: Fixed a heap-based buffer overflow at MagickCore/statistic.c (bsc#1140538).\n- CVE-2019-12977: Fixed the use of uninitialized values in WriteJP2Imag() (bsc#1139884).\n- CVE-2019-12975: Fixed a memory leak in the WriteDPXImage() in coders/dpx.c (bsc#1140106).\n- CVE-2019-13135: Fixed the use of uninitialized values in ReadCUTImage() (bsc#1140103).\n- CVE-2019-12978: Fixed the use of uninitialized values in ReadPANGOImage() (bsc#1139885).\n- CVE-2019-12974: Fixed a NULL pointer dereference in the ReadPANGOImage() (bsc#1140111).\n- CVE-2019-13304: Fixed a stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140547).\n- CVE-2019-13305: Fixed one more stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140545).\n- CVE-2019-13306: Fixed an additional stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140543).\n- CVE-2019-13133: Fixed a memory leak in the ReadBMPImage() (bsc#1140100).\n- CVE-2019-13134: Fixed a memory leak in the ReadVIFFImage() (bsc#1140102).\n- CVE-2019-13137: Fixed a memory leak in the ReadPSImage() (bsc#1140105).\n- CVE-2019-13136: Fixed a integer overflow vulnerability in the TIFFSeekCustomStream() (bsc#1140104).\n- CVE-2019-12976: Fixed a memory leak in the ReadPCLImage() in coders/pcl.c(bsc#1140110).\n","status":"published","published":"2019-08-09T15:40:37Z","modified":"2026-02-04T04:28:28.43364Z","updated_at":"2026-11-02T15:53:46.44301Z"}]}}