CVE-2019-15140

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.8-43 Q16

Description The issue is related to a use-after-free error in the coders/mat.c function of the ImageMagick console graphic editor. This error can be exploited by a remote attacker to gain access to confidential data, compromise data integrity, and cause a denial of service. The vulnerability can be triggered by crafting a malicious Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c, leading to an application crash.

Recommendations For ImageMagick version 7.0.8-43 Q16, consider disabling the coders/mat.c function as a temporary workaround until a patch is available. Restrict access to the ReadImage function in MagickCore/constitute.c to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.