CVE-2019-14980: ImageMagick

Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days.

In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.

Affected products

• ImageMagick ImageMagick: from 6.0, before 6.9.10-42 (fixed in 6.9.10-42); from 7.0.0-0, before 7.0.8-42 (fixed in 7.0.8-42)
• Opensuse Leap: version 15.0 only; version 15.1 only

Published 2019-08-12. Last modified 2026-06-17.