CVE-2019-14980: Use After Free
ImageMagick is vulnerable to a denial of service, caused by a use after free vulnerability in the UnmapBlob function. By persuading a victim to open a specially-crafted file, a remote attacker could exploit this vulnerability to cause the application to crash.
Other sources
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-14980?
CVE-2019-14980 has been classified as a medium severity vulnerability due to its potential to cause application crashes.
How do I fix CVE-2019-14980?
To fix CVE-2019-14980, update ImageMagick to version 7.0.8-42 or higher.
Which versions of ImageMagick are affected by CVE-2019-14980?
CVE-2019-14980 affects ImageMagick versions prior to 7.0.8-42 and certain earlier versions of ImageMagick 6.x.
Can CVE-2019-14980 be exploited remotely?
Yes, CVE-2019-14980 can be exploited remotely if a victim opens a specially-crafted file.
What is the potential impact of CVE-2019-14980?
The potential impact of CVE-2019-14980 includes denial of service due to application crashes.