CVE-2018-14551

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.8-7

Description The issue is related to the ReadMATImageV4 function in the coders/mat.c component of ImageMagick, which uses an uninitialized variable. This leads to memory corruption. Exploitation of the issue allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For ImageMagick version 7.0.8-7, consider disabling the ReadMATImageV4 function as a temporary workaround until a patch is available. Restrict access to the coders/mat.c component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.