CVE-2019-13307

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.8-50

Description The issue is related to a heap-based buffer overflow in the EvaluateImages function of the ImageMagick console graphic editor. This overflow occurs due to mishandling of rows in the MagickCore/statistic.c file. Exploitation of this issue could allow a remote attacker to cause a denial of service.

Recommendations For ImageMagick version 7.0.8-50, consider disabling the EvaluateImages function as a temporary workaround until a patch is available. Restrict access to the affected MagickCore/statistic.c file to minimize the risk of exploitation.