CVE-2018-12599

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.8-3 Q16

Description The issue is related to the functions ReadBMPImage and WriteBMPImage in coders/bmp.c, which allow attackers to cause an out of bounds write via a crafted file. This can potentially enable a remote attacker to execute arbitrary code using a specially crafted file.

Recommendations For ImageMagick version 7.0.8-3 Q16, consider disabling the ReadBMPImage and WriteBMPImage functions in coders/bmp.c as a temporary workaround until a patch is available. Restrict access to handling BMP files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.