CVE-2018-16329

Vulnerability

In ImageMagick before version 7.0.8-8, the GetMagickProperty function in MagickCore/property.c contains a NULL pointer dereference vulnerability. The assertion at line 2825 checks image != (Image *) NULL || image_info != (ImageInfo *) NULL, which passes if image_info is non-null even when image is null. Subsequently, the code dereferences image (e.g., accessing image->interlace), causing a crash [1].

Exploitation

An attacker can trigger this vulnerability by providing a specially crafted image that reaches the vulnerable code path. No authentication or user interaction is required beyond supplying the image to an application using ImageMagick. The attack results in a denial of service due to a segmentation fault.

Impact

Successful exploitation leads to a denial of service (application crash). There is no evidence of information disclosure or remote code execution from this bug. The impact is limited to availability.

Mitigation

Update to ImageMagick version 7.0.8-8 or later, which contains the fix. No workaround is available for unpatched versions.