CVE-2019-19948: Buffer Overflow
ImageMagick is vulnerable to a heap-based buffer overflow, caused by a flaw in the WriteSGIImage function in coders/sgi.c. By persuading a victim to open a specially-crafted file, a remote attacker could overflow a buffer and execute arbitrary code on the system.
Other sources
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19948?
CVE-2019-19948 is classified as a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2019-19948?
To fix CVE-2019-19948, upgrade to the patched versions of ImageMagick or apply the appropriate updates from your distribution.
What systems are affected by CVE-2019-19948?
CVE-2019-19948 affects multiple versions of ImageMagick, including versions up to 7.0.8-43.
Can CVE-2019-19948 allow an attacker to execute arbitrary code?
Yes, exploiting CVE-2019-19948 can allow a remote attacker to execute arbitrary code on a vulnerable system.
Is there a proof of concept for CVE-2019-19948?
Yes, proof of concept examples related to CVE-2019-19948 can be found on various security-focused platforms.