CVE Feed

    Dashboard / CVE / CVE-2019-14980

    CVE-2019-14980

    In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.

    Published:Apr 21, 2019
    Last Modified:Nov 21, 2024
    EPS:Aug 12, 2019
    EPSS Score:0.00197
    CVSS Score:6.5

    Affected Products

    Vendor
    Imagemagick
    Product
    Imagemagick
    Vendor
    Opensuse
    Product
    Leap
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-416 Use After Free

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-86425 (CVSS 4.8) — ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Lay…
    CVE-2026-86424 (CVSS 2) — ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vulnerability in the v…
    CVE-2026-86422 (CVSS 1) — ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on W…
    CVE-2026-86423 (CVSS 4.8) — ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Get…
    CVE-2026-86421 (CVSS 6.3) — ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image…
    CVE-2026-86420 (CVSS 6.3) — ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside O…
    CVE-2026-62946 (CVSS 5.1) — ImageMagick is free and open-source software used for editing and manipulating digital images. In versions pri…
    CVE-2026-62363 (CVSS 5) — ImageMagick is free and open-source software used for editing and manipulating digital images. In versions pri…
    CVE-2026-62343 (CVSS 4.7) — ImageMagick is free and open-source software used for editing and manipulating digital images. In versions pri…
    CVE-2026-64685 (CVSS 5.3) — ImageMagick is free and open-source software used for editing and manipulating digital images. In versions pri…

    References

    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html
    https://github.com/ImageMagick/ImageMagick/commit/c5d012a46ae22be9444326aa37969a3f75daa3ba
    https://github.com/ImageMagick/ImageMagick/compare/7.0.8-41...7.0.8-42
    https://github.com/ImageMagick/ImageMagick6/commit/614a257295bdcdeda347086761062ac7658b6830
    https://github.com/ImageMagick/ImageMagick6/issues/43
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00040.html
    http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00042.html
    https://github.com/ImageMagick/ImageMagick/commit/c5d012a46ae22be9444326aa37969a3f75daa3ba
    https://github.com/ImageMagick/ImageMagick/compare/7.0.8-41...7.0.8-42
    https://github.com/ImageMagick/ImageMagick6/commit/614a257295bdcdeda347086761062ac7658b6830
    https://github.com/ImageMagick/ImageMagick6/issues/43

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High