CVE-2019-13135

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-908

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.htmlBroken Link
https://github.com/ImageMagick/ImageMagick/commit/cdb383749ef7b68a38891440af8cc23e0115306dPatch, Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/1599Patch, Third Party Advisory
https://github.com/ImageMagick/ImageMagick6/commit/1e59b29e520d2beab73e8c78aacd5f1c0d76196dPatch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00021.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/09/msg00007.htmlMailing List, Third Party Advisory
https://support.f5.com/csp/article/K20336394Third Party Advisory
https://support.f5.com/csp/article/K20336394?utm_source=f5support&amp%3Butm_medium=RSS
https://usn.ubuntu.com/4192-1/Third Party Advisory
https://www.debian.org/security/2020/dsa-4712Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.htmlBroken Link
https://github.com/ImageMagick/ImageMagick/commit/cdb383749ef7b68a38891440af8cc23e0115306dPatch, Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/1599Patch, Third Party Advisory
https://github.com/ImageMagick/ImageMagick6/commit/1e59b29e520d2beab73e8c78aacd5f1c0d76196dPatch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00021.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/09/msg00007.htmlMailing List, Third Party Advisory
https://support.f5.com/csp/article/K20336394Third Party Advisory
https://support.f5.com/csp/article/K20336394?utm_source=f5support&amp%3Butm_medium=RSS
https://usn.ubuntu.com/4192-1/Third Party Advisory
https://www.debian.org/security/2020/dsa-4712Third Party Advisory

Timeline

Published: Jul 1, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-131367.8ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c.CVE-2019-131376.5ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.CVE-2019-131398.4In Docker before 18.09.4, an attacker who is capable of supplying or manipulating the build path for the "docker build" command would be abl CVE-2019-13146.8A security feature bypass vulnerability exists in Windows 10 Mobile when Cortana allows a user to access files and folders through the locke CVE-2019-131406.5Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DE CVE-2019-131425.5The RzSurroundVADStreamingService (RzSurroundVADStreamingService.exe) in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executable CVE-2019-131439.8An HTTP parameter pollution issue was discovered on Shenzhen Dragon Brothers Fingerprint Bluetooth Round Padlock FB50 2.3. With the user ID,CVE-2019-131449.8myTinyTodo 1.3.3 through 1.4.3 allows CSV Injection. This is fixed in 1.5.CVE-2019-131465.3The field_test gem 0.3.0 for Ruby has unvalidated input. A method call that is expected to return a value from a certain set of inputs can b CVE-2019-131476.5In Audio File Library (aka audiofile) 0.3.6, there exists one NULL pointer dereference bug in ulaw2linear_buf in G711.cpp in libmodules.a th CVE-2019-131488.8An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authenti CVE-2019-131498.8An issue was discovered in TRENDnet TEW-827DRU firmware before 2.05B11. There is a command injection in apply.cgi (exploitable with authenti