CVE-2019-13303

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.8-50

Description The issue is related to a buffer over-read in the CompositeImage function of the MagickCore/composite.c module. This can be exploited by a remote attacker using a specially crafted image, potentially leading to denial of service or execution of arbitrary code.

Recommendations For ImageMagick version 7.0.8-50, consider disabling the CompositeImage function in the MagickCore/composite.c module as a temporary workaround until a patch is available.