Vulnerability in N/a
CVE-2018-16323
ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive infor…
EPSS: 0.875 (99.5th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 45890 (exploit, x_refsource_EXPLOIT-DB)
- github.com/ImageMagick/ImageMagick/commit/216d117f05bff87b9dc4db55a1b1fadb38bcb… (x_refsource_MISC)
- USN-3785-1 (x_refsource_UBUNTU, vendor-advisory)
- USN-4034-1 (x_refsource_UBUNTU, vendor-advisory)
Frequently asked questions
- What is CVE-2018-16323?
- CVE-2018-16323 is a vulnerability in N/a. Published 2018-09-01.
- Is CVE-2018-16323 known to be exploited?
- 12 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.