CVE-2018-5685

MEDIUM · CVSS 6.5 EPSS 1.94%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-01-14 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2018-5685

Severity

MEDIUM

CVSS

6.5

EPSS

1.94%

Original Filing — NVD Description

In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function (coders/bmp.c). Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value.