NULL Pointer Dereference The advisory has been revoked - it doesn't affect any version of package imagemagick  (opens in a new tab)


Threat Intelligence

EPSS
2.28% (83rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-DEBIAN9-IMAGEMAGICK-602082
  • published19 Aug 2020
  • disclosed1 Sept 2018

Introduced: 1 Sep 2018

CVE-2018-16329  (opens in a new tab)
CWE-476  (opens in a new tab)

Amendment

The Debian security team deemed this advisory irrelevant for Debian:9.

NVD Description

Note: Versions mentioned in the description apply only to the upstream imagemagick package and not the imagemagick package as distributed by Debian.

In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty function in MagickCore/property.c.