CVE-2018-18025

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.8 through 7.0.13

Description The issue is related to a heap-based buffer over-read in the EncodeImage function of coders/pict.c. This allows attackers to cause a denial of service via a crafted SVG image file. The vulnerability can be exploited by a remote attacker to disrupt service using a specially crafted SVG file.

Recommendations For ImageMagick versions 7.0.8 through 7.0.13, consider disabling the EncodeImage function in coders/pict.c as a temporary workaround until a patch is available. Restrict access to handling SVG image files to minimize the risk of exploitation.