← All advisories

Critical severity9.8NVD Advisory· Published Dec 24, 2019· Updated Jun 17, 2026

CVE-2019-19952

CVE-2019-19952

Description

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

ImageMagick/Imagemagick2 versions
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*range: >=7.0.8-61,<7.0.9-7
- (no CPE)range: 7.0.9-7 Q16
ImageMagick/ImageMagickdescription

Patches

Vulnerability mechanics

References

1

github.com/ImageMagick/ImageMagick/issues/1791nvdExploitPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.