CVE-2019-17541: ImageMagick

High severity, CVSS 8.8. EPSS: 2.4% chance of exploitation in the next 30 days.

ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.

Affected products

• ImageMagick ImageMagick: before 6.9.10-55 (fixed in 6.9.10-55); from 7.0.0-0, before 7.0.8-55 (fixed in 7.0.8-55)

Published 2019-10-14. Last modified 2026-06-17.