CVE-2019-17541

ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c

published October 14, 2019

CVSS
—
EPSS
2%
Percentile
83.9
In the wild
Unconfirmed
What it is

ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02396 · 83.9th percentile
Published
2019-10-14T01:06Z
EPSS history
Timeline
  • 14 OCT 01:06Z
    ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c
    cvelistv5