ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can trigger a one-byte heap out-of-bounds read during image decoding, resulting in denial of service and potential disclosure of an adjacent heap byte.
8:7.1.1.43+dfsg1-18:7.1.1.43+dfsg1-1ubuntu18:7.1.1.43+dfsg1-1ubuntu28:7.1.2.3+dfsg1-18:7.1.2.3+dfsg1-1ubuntu0.18:6.7.7.10-6ubuntu3.13+esm258:6.8.9.9-7ubuntu5.16+esm248:6.9.7.4+dfsg-16ubuntu6.15+esm168:6.9.10.23+dfsg-2.1ubuntu11.11+esm148:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm148:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13Exploitability
AV:NAC:HAT:PPR:NUI:NVulnerable System
VC:LVI:NVA:NSubsequent System
SC:NSI:NSA:NCVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N