CVE-2018-16412: High severity imagemagick vulnerability
Published Sep 3, 2018
·Updated
ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function.
Affected Software
3 affected componentsFixes available
ImageMagick ImageMagick=7.0.8-11-q16
openSUSE Leap=15.0
debian/imagemagick
8:6.9.11.60+dfsg-1.3+deb11u48:6.9.11.60+dfsg-1.3+deb11u58:6.9.11.60+dfsg-1.6+deb12u28:6.9.11.60+dfsg-1.6+deb12u18:7.1.1.43+dfsg1-18:7.1.1.47+dfsg1-1
Remediation
Event History
Sep 3, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:53 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:58 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2018-16412?
CVE-2018-16412 is a vulnerability in ImageMagick 7.0.8-11 Q16 that allows for a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function.
2
What is the severity of CVE-2018-16412?
The severity of CVE-2018-16412 is high, with a CVSS score of 8.8.
3
How does CVE-2018-16412 affect ImageMagick?
CVE-2018-16412 affects ImageMagick versions 7.0.8-11 Q16.
4
How does CVE-2018-16412 affect openSUSE Leap?
CVE-2018-16412 affects openSUSE Leap version 15.0.
5
How do I fix CVE-2018-16412 in Ubuntu?
To fix CVE-2018-16412 in Ubuntu, update ImageMagick package to version 8:6.9.7.4+dfsg-16ubuntu6.7, 8:6.9.10.8+dfsg-1ubuntu2.2, or 8:6.8.9.9-7ubuntu5.14.