Approved changes feed: RSS · Atom

cpe:2.3:a:imagemagick:imagemagick:7.0.8-43:q16:*:*:*:*:*:*

part: a version: 7.0.8-43 update: q16

VendorImagemagick (32d6d751-1860-57ab-a9e9-dc7f7c883682)
ProductImagemagick (fa9ea99f-9ea8-56c5-9f62-fd314777f530)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/imagemagick/imagemagick purl2cpe 2026-06-01 10:15:27.479680
pkg:imagemagick/imagemagick purl2cpe 2026-06-01 10:15:27.479681

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-19948 vulnerable 2026-06-08 05:13:24.091459 Details available
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
Published: 2019-12-24T00:07:19.000Z
Updated: 2024-08-05T02:32:10.499Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15141 vulnerable 2026-06-08 05:12:56.735525 Details available
WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and TIFFWriteDirectoryTagColormap in tif_dirwrite.c of LibTIFF. NOTE: this occurs because of an incomplete fix for CVE-2019-11597.
Published: 2019-08-18T18:30:56.000Z
Updated: 2024-08-05T00:42:03.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15140 vulnerable 2026-06-08 05:12:56.734853 Details available
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c.
Published: 2019-08-18T18:31:06.000Z
Updated: 2024-08-05T00:34:53.318Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11597 vulnerable 2026-06-08 05:12:37.708166 Details available
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file.
Published: 2019-04-29T15:05:54.000Z
Updated: 2024-08-04T22:55:41.024Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.