CVE-2019-13305

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.8-50 Q16

Description The issue is related to a stack-based buffer overflow in the WritePNMImage function, located in coders/pnm.c, due to a misplaced strncpy and an off-by-one error. This can be exploited by a remote attacker using a specially crafted image, potentially leading to a denial of service or the execution of arbitrary code.

Recommendations For ImageMagick version 7.0.8-50 Q16, consider disabling the WritePNMImage function in coders/pnm.c as a temporary workaround until a patch is available. Restrict the use of the strncpy function to minimize the risk of exploitation. Avoid using the off-by-one error prone code in the WritePNMImage function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.