CVE-2019-13297

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.8-50 Q16

Description The issue is related to a heap-based buffer over-read in the AdaptiveThresholdImage function at MagickCore/threshold.c. This occurs because a height of zero is mishandled. Exploitation of this issue may allow a remote attacker to cause a denial of service or disclose sensitive information using a specially crafted image.

Recommendations For ImageMagick version 7.0.8-50 Q16, as a temporary workaround, consider disabling the AdaptiveThresholdImage function until a patch is available. Restrict access to the threshold.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.