NetSight
IP …
medium6.5

CVE-2018-16749

In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob asserti…

Impact

In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and application exit) via a crafted file.

Affected products

VendorProductAffected versions
ImagemagickImagemagick
before 6.9.9-42
from 7.0.0-0 through 7.0.7-29
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04
DebianDebian Linux
Versions 8.0, 9.0

Weakness classification

CWE-476

References