DEBIAN-CVE-2018-16323

    Dashboard / Vulnerabilities / DEBIAN-CVE-2018-16323

    DEBIAN-CVE-2018-16323

    Published: 1 Sept 2018Last Modified: 1 Sept 2026
    Upstream:
    CVE-2018-16323

    Summary:

    Details: ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affected code is used as a library loaded into a process that includes sensitive information, that information sometimes can be leaked via the image data.

    References: https://security-tracker.debian.org/tracker/CVE-2018-16323

    Affected packages

    Package

    Name: imagemagick

    Purl: pkg:deb/debian/imagemagick?arch=source&distro=bookworm

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -8:6.9.10.14+dfsg-1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High