Alpine/imagemagick: high 7.1

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding.

Action: Upgrade imagemagick to 7.0.10.18-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2020-13902#Alpine:v3.13/imagemagick
• https://security.alpinelinux.org/vuln/CVE-2020-13902

published 2020-06-07T18:15:10.067Z · modified 2026-11-03T06:32:23.824628763Z · JSON