CVE-2019-11037 — Out of bounds memory write in PHP Imagick extension

Affected: PHP Group PHP Imagick extension

In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix() function did not check that the address will be within the allocated array. This could lead to out of bounds write to memory if the function is called with the data controlled by untrusted party.

USN-4586-1 — php-imagick vulnerability

Affected: Ubuntu:18.04:LTS: php-imagick

It was discovered that PHP ImageMagick extension didn't check the address used by an array. An attacker could use this issue to cause PHP ImageMagick to crash, resulting in a denial of service.

Most recent entries from all

CVE-2019-11037 — Out of bounds memory write in PHP Imagick extension

USN-4586-1 — php-imagick vulnerability