High severity7.8NVD Advisory· Published Jul 5, 2019· Updated Jun 17, 2026
CVE-2019-13305
CVE-2019-13305
Description
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- ImageMagick/ImageMagickdescription
- Range: 7.0.8-50
- osv-coords6 versionspkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Leap%2015.0pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Leap%2015.1pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP1pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP1
< 7.0.7.34-lp151.7.9.1+ 5 more
- (no CPE)range: < 7.0.7.34-lp151.7.9.1
- (no CPE)range: < 7.0.7.34-lp151.7.9.1
- (no CPE)range: < 7.0.7.34-3.67.1
- (no CPE)range: < 7.0.7.34-3.67.1
- (no CPE)range: < 7.0.7.34-3.67.1
- (no CPE)range: < 7.0.7.34-3.67.1
Patches
Vulnerability mechanics
References
8- github.com/ImageMagick/ImageMagick/commit/29efd648f38b73a64d73f14cd2019d869a585888nvdPatch
- github.com/ImageMagick/ImageMagick6/commit/5c7fbf9a14fb83c9685ad69d48899f490a37609dnvdPatch
- github.com/ImageMagick/ImageMagick/issues/1613nvdExploitIssue TrackingPatchThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.htmlnvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2019/08/msg00021.htmlnvdMailing ListThird Party Advisory
- usn.ubuntu.com/4192-1/nvdThird Party Advisory
- www.debian.org/security/2020/dsa-4712nvdThird Party Advisory
- www.debian.org/security/2020/dsa-4715nvdThird Party Advisory
News mentions
0No linked articles in our index yet.