CVE-2018-16640
libmagickwand-6-headers: ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c.
CVE-2018-16640 is fixed in 21 products on 1 platform, first by imagemagick 8:6.9.7.4+dfsg-16ubuntu6.4, released September 8, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Negligible
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0255
85th percentile
ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| imagemagick · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | imagemagick 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| imagemagick-6-common · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | imagemagick-6-common 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| imagemagick-6.q16 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | imagemagick-6.q16 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| imagemagick-6.q16hdri · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | imagemagick-6.q16hdri 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| imagemagick-common · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | imagemagick-common 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libimage-magick-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libimage-magick-perl 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libimage-magick-q16-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libimage-magick-q16-perl 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libimage-magick-q16hdri-perl · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libimage-magick-q16hdri-perl 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagick++-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagick++-6-headers 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagick++-6.q16-7 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagick++-6.q16-7 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagick++-6.q16hdri-7 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagick++-6.q16hdri-7 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickcore-6-arch-config · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickcore-6-arch-config 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickcore-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickcore-6-headers 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickcore-6.q16-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickcore-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickcore-6.q16-3-extra · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickcore-6.q16-3-extra 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickcore-6.q16hdri-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickcore-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickcore-6.q16hdri-3-extra · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickcore-6.q16hdri-3-extra 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickwand-6-headers · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickwand-6-headers 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickwand-6.q16-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickwand-6.q16-3 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| libmagickwand-6.q16hdri-3 · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | libmagickwand-6.q16hdri-3 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |
| perlmagick · Ubuntu 18.04.6 LTS (bionic) | 8:6.9.7.4+dfsg-16ubuntu6.4 | perlmagick 8:6.9.7.4+dfsg-16ubuntu6.4 | Sep 8, 2018 |