{"id":"UBUNTU-CVE-2021-3596","details":"A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.c. This issue is due to not checking the return value from libxml2's xmlCreatePushParserCtxt() and uses the value directly, which leads to a crash and segmentation fault.","modified":"2025-07-16T08:15:46.027536Z","published":"2022-02-24T19:15:00Z","withdrawn":"2025-07-18T16:46:27Z","upstream":["CVE-2021-3596"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-3596"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2021-3596"}],"affected":[{"package":{"name":"imagemagick","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/imagemagick@8:6.9.11.60+dfsg-1.3build1?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.60+dfsg-1.3build1"}]}],"versions":["8:6.9.11.60+dfsg-1ubuntu1","8:6.9.11.60+dfsg-1.3"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"imagemagick","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"imagemagick-6-common","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"imagemagick-6-doc","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"imagemagick-6.q16","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"imagemagick-6.q16-dbgsym","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"imagemagick-6.q16hdri","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"imagemagick-6.q16hdri-dbgsym","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"imagemagick-common","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"imagemagick-doc","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libimage-magick-perl","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libimage-magick-q16-perl","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libimage-magick-q16-perl-dbgsym","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libimage-magick-q16hdri-perl","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libimage-magick-q16hdri-perl-dbgsym","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagick++-6-headers","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagick++-6.q16-8","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagick++-6.q16-8-dbgsym","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagick++-6.q16-dev","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagick++-6.q16hdri-8","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagick++-6.q16hdri-8-dbgsym","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagick++-6.q16hdri-dev","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagick++-dev","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagickcore-6-arch-config","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_version":"8:6.9.11.60+dfsg-1.3build1","binary_name":"libmagickcore-6-headers"},{"binary_name":"libmagickcore-6.q16-6","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_version":"8:6.9.11.60+dfsg-1.3build1","binary_name":"libmagickcore-6.q16-6-dbgsym"},{"binary_name":"libmagickcore-6.q16-6-extra","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagickcore-6.q16-6-extra-dbgsym","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagickcore-6.q16-dev","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagickcore-6.q16hdri-6","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagickcore-6.q16hdri-6-dbgsym","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagickcore-6.q16hdri-6-extra","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_version":"8:6.9.11.60+dfsg-1.3build1","binary_name":"libmagickcore-6.q16hdri-6-extra-dbgsym"},{"binary_name":"libmagickcore-6.q16hdri-dev","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagickcore-dev","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagickwand-6-headers","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagickwand-6.q16-6","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagickwand-6.q16-6-dbgsym","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_version":"8:6.9.11.60+dfsg-1.3build1","binary_name":"libmagickwand-6.q16-dev"},{"binary_version":"8:6.9.11.60+dfsg-1.3build1","binary_name":"libmagickwand-6.q16hdri-6"},{"binary_name":"libmagickwand-6.q16hdri-6-dbgsym","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagickwand-6.q16hdri-dev","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"libmagickwand-dev","binary_version":"8:6.9.11.60+dfsg-1.3build1"},{"binary_name":"perlmagick","binary_version":"8:6.9.11.60+dfsg-1.3build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-3596.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"low"}]}