CVE-2016-9556

    Dashboard / Vulnerabilities / CVE-2016-9556

    CVE-2016-9556

    Published: 23 Mar 2017Last Modified: 7 Aug 2026

    Summary:

    Details: The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.

    References: http://lists.opensuse.org/opensuse-updates/2016-12/msg00040.html, http://www.debian.org/security/2016/dsa-3726, http://www.openwall.com/lists/oss-security/2016/11/23/1, http://www.openwall.com/lists/oss-security/2016/12/01/4, http://www.openwall.com/lists/oss-security/2016/12/02/12, http://www.securityfocus.com/bid/94492, https://blogs.gentoo.org/ago/2016/11/19/imagemagick-heap-based-buffer-overflow-in-ispixelgray-pixel-accessor-h, https://bugzilla.redhat.com/show_bug.cgi?id=1398198, https://github.com/ImageMagick/ImageMagick/commit/ce98a7acbcfca7f0a178f4b1e7b957e419e0cc99

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- fdeb2b112a9f3ab16e61c13c406bd14fc5b80d6c
    Fixed -None

    Affected versions

    7.0.3-8

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2016-9556 | CVE-DB