CVE-2019-11472

PoC —

CVSS 3.0

6.5 medium

EPSS

3%p88

Published

Apr 23, 2019 (Apr 23, 2019)

Modified

Jun 17, 2026

Description

ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (divide-by-zero error) by crafting an XWD image file in which the header indicates neither LSB first nor MSB first.

Vendors: imagemagick
Products: imagemagick
Weakness: CWE-369
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (3.4%)

In the news0 stories

No ingested article mentions this CVE yet.