Imagemagick · Imagemagick · CVE-2016-8678
**Name of the Vulnerable Software and Affected Versions**
ImageMagick version 7.0.3.0
**Description**
The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and crash, via a crafted file. This is related to the `IsPixelMonochrome` function in `MagickCore/pixel-accessor.h`. The vendor has stated that this issue is specific to Q64, which they do not support.
**Recommendations**
For ImageMagick version 7.0.3.0, consider avoiding the use of the `IsPixelMonochrome` function until a fix is available. As a temporary workaround, restrict the processing of crafted files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.