CVE-2018-11625

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-37 Q16

Description The issue allows attackers to cause a heap-based buffer over-read via a crafted file, specifically through the SetGrayscaleImage function in the quantize.c file.

Recommendations For ImageMagick version 7.0.7-37 Q16, consider avoiding the use of the SetGrayscaleImage function until a patch is available. As a temporary workaround, restrict the processing of crafted files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.