Unscored CVE-2019-18853 EUVD-2019-8550GHSA-j9vr-6635-6998

ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly restricted in coders…

Published Nov 11, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly restricted in coders/svg.c, related to SVG and libxml2.

References

https://fortiguard.com/zeroday/FG-VD-19-136
https://github.com/ImageMagick/ImageMagick/commit/ec9c8944af2bfc65c697ca44f93a727a99b405f1