CVE-2018-5248: High severity imagemagick vulnerability
In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixeldecode function.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-5248?
CVE-2018-5248 is a vulnerability in ImageMagick 7.0.7-17 Q16 that allows for a heap-based buffer over-read in the ReadSIXELImage function.
How severe is CVE-2018-5248?
CVE-2018-5248 has a severity score of 8.8, indicating a high severity.
Which versions of ImageMagick are affected by CVE-2018-5248?
ImageMagick 7.0.7-17 Q16 is affected by CVE-2018-5248.
How can I fix CVE-2018-5248?
To fix CVE-2018-5248, you should update ImageMagick to version 8:6.9.7.4+dfsg-16ubuntu2.2 or higher.
Where can I find more information about CVE-2018-5248?
You can find more information about CVE-2018-5248 at the following references: [GitHub](https://github.com/ImageMagick/ImageMagick/issues/927), [Debian Security Tracker](https://security-tracker.debian.org/tracker/CVE-2018-5248), [CVE Mitre](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5248).