CVE-2018-6930 PUBLISHED CVSS 6.5 MEDIUM

A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.0.7-22 allows a remote attacker to cause a denial of service (application crash) via a maliciously crafted pict file.

EPSS 0.57% · 68.5th percentile

Risk Scores

CVSS v3.0
6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
0.57%
68.5th percentile

Affected Products

VendorProductVersions
imagemagickimagemagick7.0.7-22
n/an/an/a

Timeline

References

Open in Interactive Console →