Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-16323
6.5
MEDIUMCVSS v3
Published
September 1, 2018
CVSS v2
4.3 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data.
ImageMagick/ImageMagick
GitHubImageMagick is a free, open-source software suite for creating, editing, converting, and displaying images. It supports 200+ formats and offers powerful command-line tools and APIs for automation, scripting, and integration across platforms.
GitHubImageMagick is a free, open-source software suite for creating, editing, converting, and displaying images. It supports 200+ formats and offers powerful command-line tools and APIs for automation, scripting, and integration across platforms.< 6.9.10-9, >= 7.0.0-0, < 7.0.8-9NVD
NPM