CVE-2019-16711
ImageMagick: memory leak in Huffman2DEncodeImage in coders/ps2.c
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.
ImageMagick versión 7.0.8-40, presenta una pérdida de memoria en la función Huffman2DEncodeImage en el archivo coders/ps2.c.
An update that fixes 11 vulnerabilities is now available. This update for ImageMagick fixes the following issues. Fixed a denial-of-service vulnerability in ReadXWDImage. Fixed a use-after-free bug in the Matlab image parser. Fixed a divide-by-zero vulnerability in the MeanShiftImage function. Fixed an application crash resulting from a heap-based buffer over-read in WriteTIFFImage. Fixed a use after free in the UnmapBlob function. Fixed a memory leak in magick/xwindow.c. Fixed a memory leak in coders/dps.c. Fixed a memory leak in coders/dot.c. Fixed a memory leak in Huffman2DEncodeImage in coders/ps2.c. Fixed a memory leak in Huffman2DEncodeImage in coders/ps3.c. Fixed a memory leak in coders/dot.c. This update was imported from the SUSE:SLE-15:Update update project.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-09-23 CVE Reserved
- 2019-09-23 CVE Published
- 2024-08-05 CVE Updated
- 2024-08-05 First Exploit
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-401: Missing Release of Memory after Effective Lifetime
- CWE-772: Missing Release of Resource after Effective Lifetime
CAPEC
References (7)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|---|---|
| https://github.com/ImageMagick/ImageMagick/issues/1542 | 2024-08-05 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html | 2022-04-22 | |
| http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html | 2022-04-22 | |
| https://usn.ubuntu.com/4192-1 | 2022-04-22 | |
| https://www.debian.org/security/2020/dsa-4712 | 2022-04-22 | |
| https://access.redhat.com/security/cve/CVE-2019-16711 | 2020-03-31 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1801673 | 2020-03-31 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Imagemagick Search vendor "Imagemagick" | Imagemagick Search vendor "Imagemagick" for product "Imagemagick" | 7.0.8-40 Search vendor "Imagemagick" for product "Imagemagick" and version "7.0.8-40" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 10.0 Search vendor "Debian" for product "Debian Linux" and version "10.0" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Leap Search vendor "Opensuse" for product "Leap" | 15.0 Search vendor "Opensuse" for product "Leap" and version "15.0" | - |
Affected
| ||||||
| Opensuse Search vendor "Opensuse" | Leap Search vendor "Opensuse" for product "Leap" | 15.1 Search vendor "Opensuse" for product "Leap" and version "15.1" | - |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 16.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "16.04" | esm |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 18.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "18.04" | lts |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 19.04 Search vendor "Canonical" for product "Ubuntu Linux" and version "19.04" | - |
Affected
| ||||||
| Canonical Search vendor "Canonical" | Ubuntu Linux Search vendor "Canonical" for product "Ubuntu Linux" | 19.10 Search vendor "Canonical" for product "Ubuntu Linux" and version "19.10" | - |
Affected
| ||||||