CVE-2018-18023

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of…

published October 7, 2018

CVSS
—
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a crafted SVG image file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01477 · 73.7th percentile
Published
2018-10-07T18:00Z
EPSS history
Timeline
  • 07 OCT 18:00Z
    In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of…
    cvelistv5