CVE-2018-18025: Debian Linux

Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days.

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file.

Affected products

• Debian Debian Linux: version 8.0 only
• ImageMagick ImageMagick: version 7.0.8-13 only

Published 2018-10-07. Last modified 2026-06-17.