CVE-2018-16323

ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value

published September 1, 2018

CVSS
—
EPSS
49%
Percentile
98.9
In the wild
Unconfirmed
What it is

ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.49324 · 98.9th percentile
Published
2018-09-01T18:00Z
EPSS history
Timeline
  • 01 SEP 18:00Z
    ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value
    cvelistv5