CVE-2019-13308

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.8-50 Q16

Description The issue is related to a heap-based buffer overflow in the ComplexImage function, located in MagickCore/fourier.c. This allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service by exploiting the buffer overflow.

Recommendations For ImageMagick version 7.0.8-50 Q16, consider disabling the ComplexImage function in MagickCore/fourier.c as a temporary workaround until a patch is available. Restrict access to the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.