CVE-2018-9133

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes)…

published March 30, 2018

CVSS
—
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03166 · 87.8th percentile
Published
2018-03-30T08:00Z
EPSS history
Timeline
  • 30 MAR 08:00Z
    ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes)…
    cvelistv5