-
-
Notifications
You must be signed in to change notification settings - Fork 1.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
AddressSanitizer: heap-use-after-free at constitute.c:659 #1554
Comments
urban-warrior
pushed a commit
that referenced
this issue
Apr 27, 2019
urban-warrior
pushed a commit
to ImageMagick/ImageMagick6
that referenced
this issue
Apr 27, 2019
Thanks for the problem report. We can reproduce it and will have a patch to fix it in GIT master branch @ https://github.com/ImageMagick/ImageMagick later today. The patch will be available in the beta releases of ImageMagick @ https://www.imagemagick.org/download/beta/ by sometime tomorrow. |
This was assigned CVE-2019-15140. |
lineageos-gerrit
pushed a commit
to LineageOS/android_external_ImageMagick
that referenced
this issue
Dec 11, 2019
Backport of upstream f7206618d27c2e69d977abf40e3035a33e5f6be0 Bug: 140328986 Change-Id: Iaa9773b2efe658948d45f20282f7ed47d8331178 Merged-In: I84d6258cd854be68c752b62964fd746fc6b38fc3 (cherry picked from commit 57879bb058a6c431111e48fa985518ed28efb169)
lineageos-gerrit
pushed a commit
to LineageOS/android_external_ImageMagick
that referenced
this issue
Dec 22, 2019
Backport of upstream f7206618d27c2e69d977abf40e3035a33e5f6be0 Bug: 140328986 Change-Id: Iaa9773b2efe658948d45f20282f7ed47d8331178 Merged-In: I84d6258cd854be68c752b62964fd746fc6b38fc3 (cherry picked from commit 57879bb058a6c431111e48fa985518ed28efb169)
seluce
added a commit
to seluce/android_external_ImageMagick
that referenced
this issue
Dec 23, 2019
andi34
pushed a commit
to android-security/android_external_ImageMagick
that referenced
this issue
Apr 21, 2020
Backport of upstream f7206618d27c2e69d977abf40e3035a33e5f6be0 Bug: 140328986 Change-Id: Iaa9773b2efe658948d45f20282f7ed47d8331178 Merged-In: I84d6258cd854be68c752b62964fd746fc6b38fc3 (cherry picked from commit 57879bb058a6c431111e48fa985518ed28efb169)
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Prerequisites
Description
ImageMagick convert suffers from a heap-use-after-free vulnerability.
Steps to Reproduce
convert $FILE /dev/null
System Configuration
The text was updated successfully, but these errors were encountered: