CVE-2018-18023: ImageMagick

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a crafted SVG image file.

Affected products

• ImageMagick ImageMagick: version 7.0.8-13 only

Published 2018-10-07. Last modified 2026-06-17.