CVE-2019-13454

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.htmlMailing List, Third Party Advisory
http://www.securityfocus.com/bid/109099Third Party Advisory, VDB Entry
https://github.com/ImageMagick/ImageMagick/blob/7.0.1-0/MagickCore/layer.c#L1618Product
https://github.com/ImageMagick/ImageMagick/commit/1ddcf2e4f28029a888cadef2e757509ef5047ad8Patch, Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/1629Exploit, Third Party Advisory
https://github.com/ImageMagick/ImageMagick6/commit/4f31d78716ac94c85c244efcea368fea202e2ed4Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00030.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/4192-1/Third Party Advisory
https://www.debian.org/security/2020/dsa-4712Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00069.htmlMailing List, Third Party Advisory
http://www.securityfocus.com/bid/109099Third Party Advisory, VDB Entry
https://github.com/ImageMagick/ImageMagick/commit/1ddcf2e4f28029a888cadef2e757509ef5047ad8Patch, Third Party Advisory
https://github.com/ImageMagick/ImageMagick/issues/1629Exploit, Third Party Advisory
https://github.com/ImageMagick/ImageMagick6/commit/4f31d78716ac94c85c244efcea368fea202e2ed4Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/08/msg00030.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/4192-1/Third Party Advisory
https://www.debian.org/security/2020/dsa-4712Third Party Advisory

Timeline

Published: Jul 9, 2019
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2019

CVE-2019-134559.8In Xymon through 4.3.28, a stack-based buffer overflow vulnerability exists in the alert acknowledgment CGI tool because of   expansion CVE-2019-134566.5In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 CVE-2019-134574.3An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8. A customer user can use the search results to disclose inf CVE-2019-134586.5An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.8, and Community Edition 5.0.x through 5.0.36 and 6.0.x throu CVE-2019-13466.5A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. T CVE-2019-134617.5In PrestaShop before 1.7.6.0 RC2, the id_address_delivery and id_address_invoice parameters are affected by an Insecure Direct Object Refere CVE-2019-134629.1Lansweeper before 7.1.117.4 allows unauthenticated SQL injection.CVE-2019-134636.1An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers CVE-2019-134647.5An issue was discovered in OWASP ModSecurity Core Rule Set (CRS) 3.0.2. Use of X.Filename instead of X_Filename can bypass some PHP Script U CVE-2019-134658.6An issue was discovered in the ROS communications-related packages (aka ros_comm or ros-melodic-ros-comm) through 1.14.3. ROS_ASSERT_MSG onl CVE-2019-134667.5Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 have Incorrect Access Control. The “generate reports” CVE-2019-134675.9Description: Western Digital SSD Dashboard before 2.5.1.0 and SanDisk SSD Dashboard before 2.5.1.0 applications are potentially vulnerable t