CVE-2019-13300

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.8-50

Description The issue is related to a heap-based buffer overflow in the EvaluateImages function of the MagickCore/statistic.c module. This can be exploited by a remote attacker using a specially crafted image, potentially leading to denial of service or execution of arbitrary code.

Recommendations For ImageMagick version 7.0.8-50, consider disabling the EvaluateImages function in the MagickCore/statistic.c module as a temporary workaround until a patch is available. Restrict the use of the ImageMagick software to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.