CVE-2019-13135

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.8-50

Description The issue is related to a "use of uninitialized value" in the ReadCUTImage function in coders/cut.c. It is also described as a vulnerability due to insufficient input validation in the ReadCUTImage function, which could allow a remote attacker to access confidential information or cause a denial of service.

Recommendations For versions prior to 7.0.8-50, update to version 7.0.8-50 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ReadCUTImage function in coders/cut.c until a patch is applied.