CVE-2019-13134: ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c.

Security readout for executives and security teams

CVE-2019-13134 is a memory leak in ImageMagick when reading VIFF images. Systems that automatically process user-supplied images could waste memory and potentially suffer service degradation. The public record does not show active exploitation or a CVSS score. Exposure is likely on servers, applications, or containers using ImageMagick versions before 7.0.8-50 to process untrusted images. Downstream Linux packages may be patched through vendor backports, so package version alone may need vendor advisory review. Prioritize remediation for internet-facing or high-volume image-processing services. For internal systems that do not process untrusted VIFF images, handle during normal patch cycles. Lack of CVSS and KEV evidence lowers urgency, but automated upload workflows increase business risk. Mitigation focus: Upgrade ImageMagick to 7.0.8-50 or later where applicable.; Apply downstream operating system security updates, including relevant SUSE or openSUSE packages.; If immediate patching is unavailable, limit ImageMagick processing of untrusted VIFF files..

Prepared

Jun 6, 2026, 21:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.