CVE-2019-12974

A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 allows remote attackers to cause a denial of service via a crafted image.

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type

GIT

Repo

https://github.com/imagemagick/imagemagick

Events

Introduced

0b6445d493f4d7046471d1d6f9610fb34b1fd916

Last affected

0b6445d493f4d7046471d1d6f9610fb34b1fd916

Database specific

{
    "extracted_events": [
        {
            "introduced": "7.0.8-34"
        },
        {
            "last_affected": "7.0.8-34"
        }
    ],
    "cpe": "cpe:2.3:a:imagemagick:imagemagick:7.0.8-34:*:*:*:*:*:*:*",
    "source": "CPE_STRING"
}

Affected versions

7.*

7.0.8-34

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-12974.json"