8.8
CVSSv3

CVE-2019-13391

Published: 07/07/2019 Updated: 08/09/2020
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

It exists that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

imagemagick imagemagick 7.0.8-50

Vendor Advisories

Debian Bug report logs - #931633 imagemagick: CVE-2019-13391 Package: src:imagemagick; Maintainer for src:imagemagick is ImageMagick Packaging Team <pkg-gmagick-im-team@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 8 Jul 2019 14:36:01 UTC Severity: important Tags: securit ...
Several security issues were fixed in ImageMagick ...
Impact: Low Public Date: 2019-06-11 CWE: CWE-125 Bugzilla: 1727739: CVE-2019-13391 imagemagick: heap-ba ...