NetSight
high8.8

CVE-2018-11625

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file.

Impact

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file.

Affected products

VendorProductAffected versions
ImagemagickImagemagick
Version 7.0.7-37
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10, 18.04

Weakness classification

References