PT-2018-10735
CVE-2018-11655
·
Published
2018-01-04
·
Updated
2019-10-03
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
ImageMagick version 7.0.7-20 Q16 x86 64
Description
A memory leak issue was discovered in the GetImagePixelCache function in MagickCore/cache.c. This issue allows attackers to cause a denial of service by using a manipulated CALS image file.
Recommendations
For ImageMagick version 7.0.7-20 Q16 x86 64, consider disabling the GetImagePixelCache function as a temporary workaround until a patch is available. Restrict access to handling CALS image files to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾