CVE-2019-13302

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.8-50 Q16

Description The issue is related to a heap-based buffer over-read in the ComplexImages function, located in MagickCore/fourier.c. This can be exploited by a remote attacker using a specially crafted image, potentially leading to a denial of service or the disclosure of protected information.

Recommendations For ImageMagick version 7.0.8-50 Q16, consider restricting the use of the ComplexImages function in MagickCore/fourier.c until a patch is available. As a temporary workaround, avoid using the ComplexImages function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.