CVE-2018-5248

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixel_decode function.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/102431Third Party Advisory, VDB Entry
https://github.com/ImageMagick/ImageMagick/issues/927Exploit, Third Party Advisory
https://usn.ubuntu.com/3681-1/Third Party Advisory
https://www.debian.org/security/2018/dsa-4204Third Party Advisory
https://www.debian.org/security/2018/dsa-4245Third Party Advisory
http://www.securityfocus.com/bid/102431Third Party Advisory, VDB Entry
https://github.com/ImageMagick/ImageMagick/issues/927Exploit, Third Party Advisory
https://usn.ubuntu.com/3681-1/Third Party Advisory
https://www.debian.org/security/2018/dsa-4204Third Party Advisory
https://www.debian.org/security/2018/dsa-4245Third Party Advisory

Timeline

Published: Jan 5, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-52496.1Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inject arbitrary code via CVE-2018-52516.5In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c CVE-2018-52525.3libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the get_raw_sample_int function in imagew-main.c.CVE-2018-52537.8The AP4_FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling.CVE-2018-52547.5Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart) via a malformed path attribute in an UPDA CVE-2018-52556.5The Mlag agent in Arista EOS 4.19 before 4.19.4M and 4.20 before 4.20.2F allows remote attackers to cause a denial of service (agent restart CVE-2018-52567.5CoreOS Tectonic 1.7.x before 1.7.9-tectonic.4 and 1.8.x before 1.8.4-tectonic.3 mounts a direct proxy to the kubernetes cluster at /api/kube CVE-2018-52585.9The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensi CVE-2018-52598.8Discuz! DiscuzX X3.4 allows remote authenticated users to bypass intended attachment-deletion restrictions via a modified aid parameter.CVE-2018-52618.1An issue was discovered in Flexense DiskBoss 8.8.16 and earlier. Due to the usage of plaintext information from the handshake as input for t CVE-2018-52629.8A stack-based buffer overflow in Flexense DiskBoss 8.8.16 and earlier allows unauthenticated remote attackers to execute arbitrary code in t CVE-2018-52635.4The StackIdeas EasyDiscuss (aka com_easydiscuss) extension before 4.0.21 for Joomla! allows XSS.