Approved changes feed: RSS · Atom

cpe:2.3:a:php:imagick:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhp (9aec2613-7a27-5ce5-8ac7-140851d8da4c)
ProductImagick (81c5db4a-74b2-59a4-8204-7f9aecc6c1f8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/php-imagick purl2cpe 2026-06-01 10:17:42.712345
pkg:deb/ubuntu/php-imagick purl2cpe 2026-06-01 10:17:42.712348
pkg:github/imagick/imagick purl2cpe 2026-06-01 10:17:42.712351
pkg:nuget/PHP7_64BIT_IMAGICK_6937 purl2cpe 2026-06-01 10:17:42.712354
pkg:opensuse/php7-imagick purl2cpe 2026-06-01 10:17:42.712357
pkg:rpm/fedora/php-pecl-imagick purl2cpe 2026-06-01 10:17:42.712360
pkg:rpm/opensuse/php8-imagick purl2cpe 2026-06-01 10:17:42.712362

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11037 vulnerable 2026-06-03 14:39:25.385552 Out of bounds memory write in PHP Imagick extension
MEDIUM (4.9)
In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix() function did not check that the address will be within the allocated array. This could lead to out of bounds write to memory if the function is called with the data controlled by untrusted party.
Published: 2019-05-03T19:28:15.611Z
Updated: 2024-09-16T17:43:40.554Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.