VULNERABILITY INTELLIGENCE

CVE-2019-10650

CVSS score8.1 HIGH

EPSS probability4.13%

CISA KEVNot currently listed

Published2019-03-30

Last modified2026-06-17

Description

In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or information disclosure via a crafted image file.