CVE-2019-7397

In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c.

• CWE-401

• http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/11ad3aeb8ab1Patch, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.htmlBroken Link, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.htmlBroken Link
• http://www.securityfocus.com/bid/106847Third Party Advisory, VDB Entry
• https://github.com/ImageMagick/ImageMagick/commit/306c1f0fa5754ca78efd16ab752f0e981d4f6b82Patch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/issues/1454Exploit, Patch, Third Party Advisory
• https://usn.ubuntu.com/4034-1/Third Party Advisory
• https://www.debian.org/security/2020/dsa-4712Third Party Advisory
• http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/11ad3aeb8ab1Patch, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00034.htmlBroken Link, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00006.htmlBroken Link
• http://www.securityfocus.com/bid/106847Third Party Advisory, VDB Entry
• https://github.com/ImageMagick/ImageMagick/commit/306c1f0fa5754ca78efd16ab752f0e981d4f6b82Patch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/issues/1454Exploit, Patch, Third Party Advisory
• https://usn.ubuntu.com/4034-1/Third Party Advisory
• https://www.debian.org/security/2020/dsa-4712Third Party Advisory

Published

Feb 5, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7391ZyXEL VMG3312-B10B DSL-491HNU-B1B v2 devices allow login/log…
• CVE-2019-7392An improper authentication vulnerability in CA Privileged Ac…
• CVE-2019-7393A UI redress vulnerability in the administrative user interf…4.3
• CVE-2019-7394A privilege escalation vulnerability in the administrative u…8.8
• CVE-2019-7395In ImageMagick before 7.0.8-25, a memory leak exists in Writ…7.5
• CVE-2019-7396In ImageMagick before 7.0.8-25, a memory leak exists in Read…7.5
• CVE-2019-7398In ImageMagick before 7.0.8-25, a memory leak exists in Writ…7.5
• CVE-2019-7399Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle att…
• CVE-2019-7400Rukovoditel before 2.4.1 allows XSS.6.1
• CVE-2019-7401NGINX Unit before 1.7.1 might allow an attacker to cause a h…
• CVE-2019-7402An issue was discovered in PHPMyWind 5.5. The GetQQ function…
• CVE-2019-7403An issue was discovered in PHPMyWind 5.5. It allows remote a…