CVE-2019-11506

Name of the Vulnerable Software and Affected Versions GraphicsMagick versions 1.3.30 through 1.4 snapshot-20190403 Q8

Description The issue is related to a heap-based buffer overflow in the WriteMATLABImage function, located in coders/mat.c, which can be triggered by a crafted image file. This may allow an attacker to cause a denial of service or have other unspecified impacts. The vulnerability is also related to ExportRedQuantumType in magick/export.c.

Recommendations For GraphicsMagick versions 1.3.30 through 1.4 snapshot-20190403 Q8, consider disabling the WriteMATLABImage function as a temporary workaround until a patch is available. Restrict the use of crafted image files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.