CVE-2018-6930

A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.0.7-22 allows a remote attacker to cause a denial of service (application crash) via a maliciously crafted pict file.

Score

CVSS 3.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2018-02-13

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Imagemagick (Imagemagick)

References

• https://github.com/ImageMagick/ImageMagick/issues/967