CVE-2018-6405

Description

In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer. The previous pointer is lost, which leads to a memory leak. This allows remote attackers to cause a denial of service.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.757

Associated Vulnerability

Vulnerability	OS Platform
Multiple vulnerabilities affected in Imagemagic (x64) 7.0.7	Windows
Multiple vulnerabilities affected in Imagemagick 7.0.7	Windows
Multiple Vulnerabilities are affected in ImageMagick 7.0.7	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234