NetSight
IP …
medium6.5

CVE-2018-7443

The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of image data in a file, which allows remote atta…

Impact

The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of image data in a file, which allows remote attackers to cause a denial of service (memory allocation failure in the AcquireMagickMemory function in MagickCore/memory.c).

Affected products

VendorProductAffected versions
ImagemagickImagemagick
Version 7.0.7-23
DebianDebian Linux
Version 7.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10, 18.04

Weakness classification

CWE-770

References