CVE-2019-13136

HIGH

Imagemagick < 7.0.8-50 - Integer Overflow

Title source: rule

ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c.

Core 4

Core References

Exploit, Third Party Advisory x_refsource_misc

Patch, Third Party Advisory x_refsource_misc

Mailing List vendor-advisory x_refsource_suse

Vendor Advisory x_refsource_confirm

CVSS v3 7.8

EPSS 0.0030

EPSS Percentile 53.4%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-190

Status published

Products (1)

imagemagick/imagemagick < 7.0.8-50

Published Jul 01, 2019

Tracked Since Feb 18, 2026