CVE-2019-15140

coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c.

References

Affected packages

Git / github.com/imagemagick/imagemagick

Affected ranges

Type: GIT
Repo: https://github.com/imagemagick/imagemagick
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

f7206618d27c2e69d977abf40e3035a33e5f6be0

Affected versions

7.*

7.0.1-0

7.0.1-1

7.0.1-10

7.0.1-2

7.0.1-3

7.0.1-4

7.0.1-5

7.0.1-6

7.0.1-7

7.0.1-8

7.0.1-9

7.0.2-0

7.0.2-1

7.0.2-10

7.0.2-2

7.0.2-3

7.0.2-4

7.0.2-5

7.0.2-6

7.0.2-7

7.0.2-8

7.0.2-9

7.0.3-0

7.0.3-1

7.0.3-10

7.0.3-2

7.0.3-3

7.0.3-4

7.0.3-5

7.0.3-6

7.0.3-7

7.0.3-8

7.0.3-9

7.0.4-0

7.0.4-1

7.0.4-10

7.0.4-2

7.0.4-3

7.0.4-4

7.0.4-5

7.0.4-6

7.0.4-7

7.0.4-8

7.0.4-9

7.0.5-0

7.0.5-1

7.0.5-10

7.0.5-2

7.0.5-3

7.0.5-4

7.0.5-5

7.0.5-6

7.0.5-7

7.0.5-8

7.0.5-9

7.0.6-0

7.0.6-1

7.0.6-2

7.0.6-3

7.0.6-4

7.0.6-5

7.0.6-6

7.0.6-7

7.0.6-8

7.0.6-9

7.0.7-0

7.0.7-1

7.0.7-10

7.0.7-11

7.0.7-12

7.0.7-13

7.0.7-14

7.0.7-15

7.0.7-16

7.0.7-17

7.0.7-18

7.0.7-19

7.0.7-2

7.0.7-20

7.0.7-21

7.0.7-22

7.0.7-23

7.0.7-24

7.0.7-25

7.0.7-26

7.0.7-27

7.0.7-28

7.0.7-29

7.0.7-3

7.0.7-30

7.0.7-31

7.0.7-32

7.0.7-33

7.0.7-34

7.0.7-35

7.0.7-36

7.0.7-37

7.0.7-38

7.0.7-39

7.0.7-4

7.0.7-5

7.0.7-6

7.0.7-8

7.0.7-9

7.0.7.7

7.0.8-0

7.0.8-1

7.0.8-10

7.0.8-11

7.0.8-12

7.0.8-13

7.0.8-14

7.0.8-15

7.0.8-16

7.0.8-17

7.0.8-18

7.0.8-19

7.0.8-2

7.0.8-20

7.0.8-21

7.0.8-22

7.0.8-23

7.0.8-24

7.0.8-25

7.0.8-26

7.0.8-27

7.0.8-28

7.0.8-29

7.0.8-3

7.0.8-30

7.0.8-31

7.0.8-32

7.0.8-33

7.0.8-34

7.0.8-35

7.0.8-36

7.0.8-37

7.0.8-38

7.0.8-39

7.0.8-4

7.0.8-40

7.0.8-41

7.0.8-42

7.0.8-5

7.0.8-6

7.0.8-7

7.0.8-8

7.0.8-9

Database specific

{
    "vanir_signatures": [
        {
            "id": "CVE-2019-15140-1014e3cf",
            "digest": {
                "length": 14321.0,
                "function_hash": "60774766087167007579795667296324027873"
            },
            "target": {
                "function": "ReadMATImage",
                "file": "coders/mat.c"
            },
            "signature_version": "v1",
            "source": "https://github.com/imagemagick/imagemagick/commit/f7206618d27c2e69d977abf40e3035a33e5f6be0",
            "deprecated": false,
            "signature_type": "Function"
        },
        {
            "id": "CVE-2019-15140-4efdabbf",
            "digest": {
                "length": 5100.0,
                "function_hash": "126806951322307414958657964617295957432"
            },
            "target": {
                "function": "ReadMATImageV4",
                "file": "coders/mat.c"
            },
            "signature_version": "v1",
            "source": "https://github.com/imagemagick/imagemagick/commit/f7206618d27c2e69d977abf40e3035a33e5f6be0",
            "deprecated": false,
            "signature_type": "Function"
        },
        {
            "id": "CVE-2019-15140-6dc0dd2a",
            "digest": {
                "line_hashes": [
                    "230667353218971223062003700308145528630",
                    "203197183354731662066322257772838773081",
                    "205952220186401744674114083883359351275",
                    "239071332081000064771163360205051097353",
                    "45159477290557203446950637289021356201",
                    "196439974504649691413867060603200322840",
                    "68063412637101709880445057729832644905",
                    "169242262769806103319655669697893203370",
                    "131330304327809387527816926622113591111",
                    "14304046299342334795439002013687978832",
                    "60662595458886716223471398195448584521",
                    "306172164695300623744345068010231458199",
                    "102818188291833007160600673482128350163",
                    "64477533733257676877988066582214060348",
                    "44306917418841663100777585047172253676",
                    "190433241807198018581496994555307046528",
                    "112789216382944424279688176466074633054",
                    "76526719637574559138761834054232404748",
                    "324873143167158747762717410156262548667"
                ],
                "threshold": 0.9
            },
            "target": {
                "file": "coders/mat.c"
            },
            "signature_version": "v1",
            "source": "https://github.com/imagemagick/imagemagick/commit/f7206618d27c2e69d977abf40e3035a33e5f6be0",
            "deprecated": false,
            "signature_type": "Line"
        }
    ]
}