CVE-2018-18024

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.8 through 7.0.13

Description The issue is related to an infinite loop in the ReadBMPImage function of the coders/bmp.c file. This allows a remote attacker to cause a denial of service using a specially crafted bmp file.

Recommendations For versions 7.0.8 through 7.0.13, consider disabling the ReadBMPImage function as a temporary workaround until a patch is available. Restrict access to handling bmp files to minimize the risk of exploitation.