CVE-2019-13296

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.8-50

Description The issue is caused by resource management errors in the CLIListOperatorImages() function of the ImageMagick console graphic editor. This can be exploited by a remote attacker to cause a denial of service. The error occurs due to direct memory leaks in AcquireMagickMemory when handling a NULL value in the CLIListOperatorImages function in MagickWand/operation.c.

Recommendations For ImageMagick version 7.0.8-50, consider restricting access to the CLIListOperatorImages() function until a patch is available to prevent potential denial of service attacks.