CVE-2019-13295

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.8-50

Description The issue is related to a heap-based buffer over-read in the AdaptiveThresholdImage function, located in MagickCore/threshold.c. This occurs due to improper handling of a zero-width value. Exploitation of this issue could allow a remote attacker to cause a denial of service or disclose sensitive information by using a specially crafted image.

Recommendations For ImageMagick version 7.0.8-50, consider disabling the AdaptiveThresholdImage function as a temporary workaround until a patch is available. Restrict access to the threshold.c module in MagickCore to minimize the risk of exploitation. Avoid using the AdaptiveThresholdImage function until the issue is resolved.