Home

CVE-2018-5248

Description

In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixel_decode function.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.661

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in Imagemagic (x64) 7.0.7Windows
Multiple Vulnerabilities are affected in Imagemagic 7.0.7Windows
Multiple Vulnerabilities are affected in ImageMagick 7.0.7Windows
imagemagick security update(DSA-4245-1) imagemagick_6.9.7.4+dfsg-11+deb9u5_i386.debLinux
imagemagick security update(DSA-4245-1) imagemagick_6.9.7.4+dfsg-11+deb9u5_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234