CVE-2019-19952
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.
Affected Platforms (CPE)
📦
Imagemagick
Back to CVE Browser
Related Vulnerabilities
CVE-2004-098110.0
Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a ce...
CVE-2021-335649.8
An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitr...
CVE-2019-199489.8
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
CVE-2014-98529.8
distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecifie...