CVE-2018-6405
PoC —CVSS 3.1
6.5 medium
EPSS
2%p75
Published
()
Modified
Description
In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer. The previous pointer is lost, which leads to a memory leak. This allows remote attackers to cause a denial of service.
- Vendors
- imagemagickcanonical
- Products
- imagemagick, ubuntu linux
- Weakness
- CWE-772
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.