CVE-2018-11625
CVE-2018-11625
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file.
CVSS 8.8 · High · EPSS 2.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
imagemagick Debian:12
- Affected ranges
- ECOSYSTEM: < 8:6.9.10.2+dfsg-2
Update to 8:6.9.10.2+dfsg-2
imagemagick Debian:13
- Affected ranges
- ECOSYSTEM: < 8:6.9.10.2+dfsg-2
Update to 8:6.9.10.2+dfsg-2
imagemagick Debian:14
- Affected ranges
- ECOSYSTEM: < 8:6.9.10.2+dfsg-2
Update to 8:6.9.10.2+dfsg-2
imagemagick Ubuntu:18.04:LTS
- Versions
- 8:6.9.7.4+dfsg-16ubuntu2
- 8:6.9.7.4+dfsg-16ubuntu3
- 8:6.9.7.4+dfsg-16ubuntu4
- 8:6.9.7.4+dfsg-16ubuntu5
- 8:6.9.7.4+dfsg-16ubuntu6
- Affected ranges
- ECOSYSTEM: < 8:6.9.7.4+dfsg-16ubuntu6.2
Update to 8:6.9.7.4+dfsg-16ubuntu6.2