← All advisories

High severity8.8NVD Advisory· Published Jul 5, 2019· Updated Jun 17, 2026

CVE-2019-13303

CVE-2019-13303

Description

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in CompositeImage.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8

ImageMagick/ImageMagickdescription
ImageMagick/Imagemagickllm-fuzzy
Range: <7.0.8-50
osv-coords6 versions
pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Leap%2015.0 pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Leap%2015.1 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1
< 7.0.7.34-lp151.7.9.1+ 5 more
- (no CPE)range: < 7.0.7.34-lp151.7.9.1
- (no CPE)range: < 7.0.7.34-lp151.7.9.1
- (no CPE)range: < 7.0.7.34-3.67.1
- (no CPE)range: < 7.0.7.34-3.67.1
- (no CPE)range: < 7.0.7.34-3.67.1
- (no CPE)range: < 7.0.7.34-3.67.1

Patches

Vulnerability mechanics

References

3

github.com/ImageMagick/ImageMagick/commit/d29148fae06c01ef215940e084cf41853c117babnvdPatch
github.com/ImageMagick/ImageMagick/issues/1603nvdExploitIssue TrackingPatchThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.htmlnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.