CVE-2018-6876

2018-02-0918:29:00

Google

osv.dev

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.0%

JSON

The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers to cause a denial of service (stack-based buffer under-read) via a crafted bmp image.

CPENameOperatorVersion
libfpxeqfpx-1_2_0-2
libfpxeqauto/ac/libfpx-1_2_0_9-1
libfpxeqAC-STABLE
libfpxeqauto/th/libfpx-1.3.1.8-1
libfpxeqauto/aidath/libfpx-1_3_0-1
libfpxeqauto/th/libfpx-1.3.1.7-1
libfpxeqSTABLE
libfpxeqauto/th/libfpx-1.3.1.6-1
libfpxeqauto/ti/libfpx-1_3_0-1
libfpxeqrpm-4_0_2-6

Name	Operator	Version
libfpx	eq	fpx-1_2_0-2
libfpx	eq	auto/ac/libfpx-1_2_0_9-1
libfpx	eq	AC-STABLE
libfpx	eq	auto/th/libfpx-1.3.1.8-1
libfpx	eq	auto/aidath/libfpx-1_3_0-1
libfpx	eq	auto/th/libfpx-1.3.1.7-1
libfpx	eq	STABLE
libfpx	eq	auto/th/libfpx-1.3.1.6-1
libfpx	eq	auto/ti/libfpx-1_3_0-1
libfpx	eq	rpm-4_0_2-6