CVE-2018-11624 - ImageMagick: use after free in ReadMATImage function in coders/mat.c

HIGH

ImageMagick: use after free in ReadMATImage function in coders/mat.c

Published May 31, 2018

8.8

HIGH

CVSS 3.0

EPSS 2.10%

In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file.

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	ImageMagick	Not affected	n/a
Red Hat Enterprise Linux 6	ImageMagick	Not affected	n/a
Red Hat Enterprise Linux 7	ImageMagick	Not affected	n/a
Red Hat Enterprise Linux 8	ImageMagick	Will not fix	n/a

Red Hat statement

This issue did not affect the versions of ImageMagick as shipped with Red Hat Enterprise Linux 5, 6, and 7.

Weaknesses (1)

CWE-416

Use After Free

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2018-11624		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1584898		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-3648		Advisory
https://github.com/ImageMagick/ImageMagick/issues/1149		x_refsource_MISCIssue TrackingVendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-11624
https://www.cve.org/CVERecord?id=CVE-2018-11624