CVE-2020-19667

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.10-7

Description The issue is related to a stack-based buffer overflow and unconditional jump in the ReadXPMImage function in the coders/xpm.c component of ImageMagick. This allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For ImageMagick version 7.0.10-7, consider disabling the ReadXPMImage function in coders/xpm.c as a temporary workaround until a patch is available. Restrict access to the coders/xpm.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.