ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.
{ "binaries": [ { "binary_name": "imagemagick", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "imagemagick-common", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "imagemagick-dbg", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "imagemagick-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "imagemagick-doc", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "libmagick++-dev", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "libmagick++-dev-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "libmagick++5", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "libmagick++5-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "libmagickcore-dev", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "libmagickcore-dev-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "libmagickcore5", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "libmagickcore5-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "libmagickcore5-extra", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "libmagickcore5-extra-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "libmagickwand-dev", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "libmagickwand-dev-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "libmagickwand5", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "libmagickwand5-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "perlmagick", "binary_version": "8:6.7.7.10-6ubuntu3.11" }, { "binary_name": "perlmagick-dbgsym", "binary_version": "8:6.7.7.10-6ubuntu3.11" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "graphicsmagick", "binary_version": "1.3.18-1ubuntu3.1+esm4" }, { "binary_name": "graphicsmagick-dbg", "binary_version": "1.3.18-1ubuntu3.1+esm4" }, { "binary_name": "graphicsmagick-dbgsym", "binary_version": "1.3.18-1ubuntu3.1+esm4" }, { "binary_name": "graphicsmagick-imagemagick-compat", "binary_version": "1.3.18-1ubuntu3.1+esm4" }, { "binary_name": "graphicsmagick-libmagick-dev-compat", "binary_version": "1.3.18-1ubuntu3.1+esm4" }, { "binary_name": "libgraphics-magick-perl", "binary_version": "1.3.18-1ubuntu3.1+esm4" }, { "binary_name": "libgraphics-magick-perl-dbgsym", "binary_version": "1.3.18-1ubuntu3.1+esm4" }, { "binary_name": "libgraphicsmagick++1-dev", "binary_version": "1.3.18-1ubuntu3.1+esm4" }, { "binary_name": "libgraphicsmagick++1-dev-dbgsym", "binary_version": "1.3.18-1ubuntu3.1+esm4" }, { "binary_name": "libgraphicsmagick++3", "binary_version": "1.3.18-1ubuntu3.1+esm4" }, { "binary_name": "libgraphicsmagick++3-dbgsym", "binary_version": "1.3.18-1ubuntu3.1+esm4" }, { "binary_name": "libgraphicsmagick1-dev", "binary_version": "1.3.18-1ubuntu3.1+esm4" }, { "binary_name": "libgraphicsmagick1-dev-dbgsym", "binary_version": "1.3.18-1ubuntu3.1+esm4" }, { "binary_name": "libgraphicsmagick3", "binary_version": "1.3.18-1ubuntu3.1+esm4" }, { "binary_name": "libgraphicsmagick3-dbgsym", "binary_version": "1.3.18-1ubuntu3.1+esm4" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "graphicsmagick", "binary_version": "1.3.23-1ubuntu0.4" }, { "binary_name": "graphicsmagick-dbg", "binary_version": "1.3.23-1ubuntu0.4" }, { "binary_name": "graphicsmagick-dbgsym", "binary_version": "1.3.23-1ubuntu0.4" }, { "binary_name": "graphicsmagick-imagemagick-compat", "binary_version": "1.3.23-1ubuntu0.4" }, { "binary_name": "graphicsmagick-libmagick-dev-compat", "binary_version": "1.3.23-1ubuntu0.4" }, { "binary_name": "libgraphics-magick-perl", "binary_version": "1.3.23-1ubuntu0.4" }, { "binary_name": "libgraphics-magick-perl-dbgsym", "binary_version": "1.3.23-1ubuntu0.4" }, { "binary_name": "libgraphicsmagick++-q16-12", "binary_version": "1.3.23-1ubuntu0.4" }, { "binary_name": "libgraphicsmagick++-q16-12-dbgsym", "binary_version": "1.3.23-1ubuntu0.4" }, { "binary_name": "libgraphicsmagick++1-dev", "binary_version": "1.3.23-1ubuntu0.4" }, { "binary_name": "libgraphicsmagick++1-dev-dbgsym", "binary_version": "1.3.23-1ubuntu0.4" }, { "binary_name": "libgraphicsmagick-q16-3", "binary_version": "1.3.23-1ubuntu0.4" }, { "binary_name": "libgraphicsmagick-q16-3-dbgsym", "binary_version": "1.3.23-1ubuntu0.4" }, { "binary_name": "libgraphicsmagick1-dev", "binary_version": "1.3.23-1ubuntu0.4" }, { "binary_name": "libgraphicsmagick1-dev-dbgsym", "binary_version": "1.3.23-1ubuntu0.4" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "imagemagick", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "imagemagick-6.q16", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "imagemagick-6.q16-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "imagemagick-common", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "imagemagick-dbg", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "imagemagick-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "imagemagick-doc", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libimage-magick-perl", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libimage-magick-q16-perl", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libimage-magick-q16-perl-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagick++-6-headers", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagick++-6.q16-5v5", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagick++-6.q16-5v5-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagick++-6.q16-dev", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagick++-6.q16-dev-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagick++-dev", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickcore-6-arch-config", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickcore-6-arch-config-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickcore-6-headers", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickcore-6.q16-2", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickcore-6.q16-2-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickcore-6.q16-2-extra", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickcore-6.q16-2-extra-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickcore-6.q16-dev", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickcore-6.q16-dev-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickcore-dev", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickwand-6-headers", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickwand-6.q16-2", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickwand-6.q16-2-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickwand-6.q16-dev", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickwand-6.q16-dev-dbgsym", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "libmagickwand-dev", "binary_version": "8:6.8.9.9-7ubuntu5.11" }, { "binary_name": "perlmagick", "binary_version": "8:6.8.9.9-7ubuntu5.11" } ], "availability": "No subscription required" }
{ "binaries": [ { "binary_name": "imagemagick", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "imagemagick-6-common", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "imagemagick-6-doc", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "imagemagick-6.q16", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "imagemagick-6.q16-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "imagemagick-6.q16hdri", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "imagemagick-6.q16hdri-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "imagemagick-common", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "imagemagick-doc", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libimage-magick-perl", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libimage-magick-q16-perl", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libimage-magick-q16-perl-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libimage-magick-q16hdri-perl", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libimage-magick-q16hdri-perl-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagick++-6-headers", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagick++-6.q16-7", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagick++-6.q16-7-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagick++-6.q16-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagick++-6.q16hdri-7", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagick++-6.q16hdri-7-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagick++-6.q16hdri-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagick++-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickcore-6-arch-config", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickcore-6-headers", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickcore-6.q16-3", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickcore-6.q16-3-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickcore-6.q16-3-extra", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickcore-6.q16-3-extra-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickcore-6.q16-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickcore-6.q16hdri-3", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickcore-6.q16hdri-3-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickcore-6.q16hdri-3-extra", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickcore-6.q16hdri-3-extra-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickcore-6.q16hdri-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickcore-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickwand-6-headers", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickwand-6.q16-3", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickwand-6.q16-3-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickwand-6.q16-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickwand-6.q16hdri-3", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickwand-6.q16hdri-3-dbgsym", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickwand-6.q16hdri-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "libmagickwand-dev", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" }, { "binary_name": "perlmagick", "binary_version": "8:6.9.7.4+dfsg-16ubuntu6.2" } ], "availability": "No subscription required" }