NetSight
IP …
high8.8

CVE-2019-13135

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c.

Impact

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c.

Affected products

VendorProductAffected versions
ImagemagickImagemagick
before 6.9.10-50
from 7.0.0-0 before 7.0.8-50
DebianDebian Linux
Versions 8.0, 9.0, 10.0
CanonicalUbuntu Linux
Versions 16.04, 18.04, 19.04, 19.10
F5Big-Ip Application Acceleration Manager
from 11.5.2 before 11.6.5.2
from 12.1.0 before 12.1.5.2
from 13.1.0 before 13.1.3.4
from 14.0.0 before 14.1.2.5
from 15.0.0 before 15.0.1.3
from 15.1.0 before 15.1.0.2
F5Big-Ip Webaccelerator
from 11.5.2 before 11.6.5.2
from 12.1.0 before 12.1.5.2
from 13.1.0 before 13.1.3.4
from 14.0.0 before 14.1.2.5
from 15.0.0 before 15.0.1.3
from 15.1.0 before 15.1.0.2

Weakness classification

CWE-908

References