CVE-2018-6930: ImageMagick

Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days.

A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.0.7-22 allows a remote attacker to cause a denial of service (application crash) via a maliciously crafted pict file.

Affected products

• ImageMagick ImageMagick: version 7.0.7-22 only

Published 2018-02-13. Last modified 2026-06-17.