NetSight
IP …
critical9.1

CVE-2019-19949

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_profile and …

Impact

In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_profile and LocaleNCompare.

Affected products

VendorProductAffected versions
ImagemagickImagemagick
from 6.9.9-33 before 6.9.10-43
from 7.0.7-23 before 7.0.8-43
DebianDebian Linux
Versions 8.0, 9.0, 10.0
CanonicalUbuntu Linux
Version 20.04
OpensuseLeap
Version 15.1

Weakness classification

CWE-125

References