Skip to content

CVE-2018-6876 The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers to cause a denial of service (stack-based buffer under-read...

MediumCVSS 6.5 EPSS 2.5%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers to cause a denial of service (stack-based buffer under-read) via a crafted bmp image.

Affected products

ProductAffected versionsFixed in
ImageMagick = 7.0.7-22-q16 No fix listed
libfpx project libfpx = 1.3.1-10 No fix listed

References

  • 103035 third-party-advisory vdb-entry
  • github.com exploit issue-tracking third-party-advisory