Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

ImageMagick may crash when processing malicious image file

CVE-2016-7527 · published 9 years ago
Summary

The ImageMagick program on Debian can be made to read beyond the data it expects when it opens a specially crafted image file. This can cause the application to stop working, potentially affecting any service that relies on image processing. Update ImageMagick to the latest version or apply the vendor’s patch to prevent the crash.

What to do
  • Update debian imagemagick to version 8:6.9.6.2+dfsg-2.
  • Update imagemagick imagemagick to version 6.9.4-0 or later.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian imagemagick < 8:6.9.6.2+dfsg-2
Fix: upgrade to 8:6.9.6.2+dfsg-2
Debian:13 debian imagemagick < 8:6.9.6.2+dfsg-2
Fix: upgrade to 8:6.9.6.2+dfsg-2
Debian:14 debian imagemagick < 8:6.9.6.2+dfsg-2
Fix: upgrade to 8:6.9.6.2+dfsg-2
– imagemagick imagemagick < 6.9.4-0
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Original advisory text
coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
References
Severity
6.5 Medium
Exploitation
3% chance of attack within 30 days
Type
CWE-125Out-of-bounds Read
Timeline
Published20 Apr 2017
Updated29 Oct 2026
First seen22 Sep 2026
Sources
DEBIAN-CVE-2016-7527 · OSV
CVE-2016-7527 · NVD
Track software like this
Free during beta