PT-2019-13910

CVE-2019-14980

·

Published

2019-05-21

·

Updated

2026-10-31

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.x through 6.9.10-41 ImageMagick versions 7.x through 7.0.8-41
Description The issue is related to a use after free vulnerability in the UnmapBlob function. This vulnerability allows an attacker to cause a denial of service by sending a crafted file.
Recommendations For ImageMagick versions 6.x through 6.9.10-41, update to version 6.9.10-42 or later. For ImageMagick versions 7.x through 7.0.8-41, update to version 7.0.8-42 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2019-1875
ALT-PU-2020-1405
CESA-2020_1180
CLEANSTART-2025-MI69022
OPENSUSE-SU-2019:2515-1
OPENSUSE-SU-2019_2515-1
OPENSUSE-SU-2019:2519-1
OPENSUSE-SU-2019_2519-1
RHSA-2020:1180
RHSA-2020_1180
SUSE-SU-2019:2785-1
SUSE-SU-2019_2785-1
SUSE-SU-2019:2785-2
SUSE-SU-2019_2785-2
SUSE-SU-2019:2896-1
SUSE-SU-2019_2896-1
Found an issue in the description? Have something to add? Feel free to write us 👾