The ConcatenateImages function in MagickWand/magick-cli.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (application crash) via a crafted file.
The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Imagemagick | Imagemagick | * | 6.9.4-1 (excluding) |
| Imagemagick | Imagemagick | 7.0.0-0 (including) | 7.0.1-10 (excluding) |
| Imagemagick | Ubuntu | upstream | * |