High severity8.8NVD Advisory· Published May 31, 2018· Updated Jun 17, 2026

CVE-2018-11625

Description

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file.

LLM-synthesized narrative grounded in this CVE's description and references.

ImageMagick/Imagemagick2 versions
cpe:2.3:a:imagemagick:imagemagick:7.0.7-37:q16:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:imagemagick:imagemagick:7.0.7-37:q16:*:*:*:*:*:*
- (no CPE)range: <=7.0.7-37
Canonical/Ubuntu Linux4 versions
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
osv-coords2 versions
pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015 pkg:rpm/suse/ImageMagick&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015
< 7.0.7.34-3.9.1+ 1 more
- (no CPE)range: < 7.0.7.34-3.9.1
- (no CPE)range: < 7.0.7.34-3.9.1

github.com/ImageMagick/ImageMagick/issues/1156nvdExploitIssue TrackingPatchThird Party Advisory
usn.ubuntu.com/3681-1/nvdThird Party Advisory

No linked articles in our index yet.