PT-2019-5881 · Imagemagick+5 · Imagemagick+5

Boo0M · Published 2019-05-21 · Updated 2026-05-11 · CVE-2019-14981

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.0 through 7.0.8-40 ImageMagick versions 6.0.0 through 6.9.10-40

Description The issue is related to a divide-by-zero vulnerability in the MeanShiftImage function. This vulnerability allows an attacker to cause a denial of service by sending a crafted file, potentially leading to a remote disruption of service.

Recommendations For ImageMagick versions 7.0.0 through 7.0.8-40, update to version 7.0.8-41 or later. For ImageMagick versions 6.0.0 through 6.9.10-40, update to version 6.9.10-41 or later.

Fix

DoS

Divide By Zero

Weakness Enumeration

CWE-369

Related Identifiers

ALT-PU-2019-1875

ALT-PU-2020-1405

BDU:2021-03588

CESA-2020_1180

CVE-2019-14981

DLA-1968-1

DLA-2333-1

DSA-4712-1

OPENSUSE-SU-2019:2515-1

OPENSUSE-SU-2019:2519-1

OPENSUSE-SU-2019_2515-1

OPENSUSE-SU-2019_2519-1

RHSA-2020:1180

RHSA-2020_1180

SUSE-SU-2019:2896-1

USN-4192-1

USN-8263-1

Affected Products

Alt Linux

Centos

Imagemagick

Red Hat

Suse

Ubuntu

References · 103

• https://github.com/ImageMagick/ImageMagick/commit/a77d8d97f5a7bced0468f0b08798c83fb67427bc · Patch
• https://github.com/ImageMagick/ImageMagick/issues/1552 · Patch
• https://github.com/ImageMagick/ImageMagick6/commit/b522d2d857d2f75b659936b59b0da9df1682c256 · Patch
• https://ubuntu.com/security/CVE-2019-12974 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-24485 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20210730SE16 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-24481 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8263-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03588 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-14981 · Security Note
• https://ubuntu.com/security/CVE-2019-13295 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-14981 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2515-1 · Vendor Advisory
• https://debian.org/security/2020/dsa-4712 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2896-1 · Vendor Advisory