The vulnerability of the ReadBMPImage and WriteBMPImage functions in the console-based image editing tool ImageMagick allows a hacker to execute arbitrary code.

The vulnerability of the ReadBMPImage and WriteBMPImage functions in the coder’s source code at bmp.c in the console-based image editing tool ImageMagick is related to writing data beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a remote attacker to execute...

DEBIAN-CVE-2018-20185

In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a denial of service via a crafted bmp image file. This only affects GraphicsMagick installations with customized BMP limits...