cbcvebase.
CVE-2019-13135
published 2019-07-01

CVE-2019-13135: ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c.

high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
canonicalubuntu_linux
debiandebian_linux
debiandebian_linux
debiandebian_linux
debianimagemagick< imagemagick 8:6.9.11.24+dfsg-1 (bookworm)imagemagick 8:6.9.11.24+dfsg-1 (bookworm)
f5big-ip_application_acceleration_manager>= 11.5.2 < 11.6.5.211.6.5.2
f5big-ip_application_acceleration_manager>= 12.1.0 < 12.1.5.212.1.5.2
f5big-ip_application_acceleration_manager>= 13.1.0 < 13.1.3.413.1.3.4
f5big-ip_application_acceleration_manager>= 14.0.0 < 14.1.2.514.1.2.5
f5big-ip_application_acceleration_manager>= 15.0.0 < 15.0.1.315.0.1.3
f5big-ip_application_acceleration_manager>= 15.1.0 < 15.1.0.215.1.0.2
f5big-ip_webaccelerator>= 11.5.2 < 11.6.5.211.6.5.2
f5big-ip_webaccelerator>= 12.1.0 < 12.1.5.212.1.5.2
f5big-ip_webaccelerator>= 13.1.0 < 13.1.3.413.1.3.4
f5big-ip_webaccelerator>= 14.0.0 < 14.1.2.514.1.2.5
f5big-ip_webaccelerator>= 15.0.0 < 15.0.1.315.0.1.3
f5big-ip_webaccelerator>= 15.1.0 < 15.1.0.215.1.0.2
imagemagickimagemagick< 6.9.10-506.9.10-50
imagemagickimagemagick>= 0 < 8:6.9.11.24+dfsg-18:6.9.11.24+dfsg-1
imagemagickimagemagick>= 0 < 8:6.9.11.24+dfsg-18:6.9.11.24+dfsg-1
imagemagickimagemagick>= 0 < 8:6.9.11.24+dfsg-18:6.9.11.24+dfsg-1
imagemagickimagemagick>= 0 < 8:6.9.11.24+dfsg-18:6.9.11.24+dfsg-1

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH