CVE ID:	CVE-2019-11037
Description:	In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing to an array of values in ImagickKernel::fromMatrix() function did not check that the address will be within the allocated array. This could lead to out of bounds write to memory if the function is called with the data controlled by untrusted party.
Test IDs:	1.3.6.1.4.1.25623.1.0.876362   1.3.6.1.4.1.25623.1.0.704576   1.3.6.1.4.1.25623.1.1.12.2022.4586.2   1.3.6.1.4.1.25623.1.0.844667   1.3.6.1.4.1.25623.1.0.852983   1.3.6.1.4.1.25623.1.0.876373   1.3.6.1.4.1.25623.1.0.876376
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-11037 BugTraq ID: 108292 http://www.securityfocus.com/bid/108292 Bugtraq: 20191126 [SECURITY] [DSA 4576-1] php-imagick security update (Google Search) https://seclists.org/bugtraq/2019/Nov/39 Debian Security Information: DSA-4576 (Google Search) https://www.debian.org/security/2019/dsa-4576 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MQ7WJA25YF2R2LRALK4QEYWUHHJPSUD/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FME5ZG7DDYWUPPHTTAFJB5OFFCPXYHPS/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BU66V7QJKD32RXLY5J7Z5NZH4V3VV524/ https://security.gentoo.org/glsa/202003-38 https://bugs.php.net/bug.php?id=77791 https://github.com/CVEProject/cvelist/pull/1964 SuSE Security Announcement: openSUSE-SU-2020:0014 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00016.html https://usn.ubuntu.com/4586-1/