CVE-2016-8682
The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to...
7.5 HighFix available
The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
3.55%Up 2.2 points since Feb 4, 2022
What each source reports
NVD Score used
The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header.
- Record
CVE-2016-8682- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header.
- Record
CVE-2016-8682- Updated
- 2026-11-02
EUVDEUVD-2016-9521 No score
The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header.
- Record
EUVD-2016-9521- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pqjj-r7v2-357p
The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to...
The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header.
- Record
GHSA-pqjj-r7v2-357p- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSV
The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header.
- Record
CVE-2016-8682- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2016-8682
The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header.
- Record
DEBIAN-CVE-2016-8682- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVUBUNTU-CVE-2016-8682
The ReadSCTImage function in coders/sct.c in GraphicsMagick 1.3.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SCT header.
- Record
UBUNTU-CVE-2016-8682- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2016-0357 No score
Updated graphicsmagick packages fix security vulnerability
The updated packages fix security vulnerabilities:
Stack-based buffer overflow in ReadSCTImage (CVE-2016-8682).
Memory allocation failure in ReadPCXImage (CVE-2016-8683).
Memory allocation failure in MagickMalloc (CVE-2016-8684).
- Record
MGASA-2016-0357- Updated
- 2026-11-02
OSVMGASA-2017-0229 No score
Updated graphicsmagick packages fix security vulnerabilities
New stable upstream release including security fixes for CVE-2016-7800, CVE-2016-7996, CVE-2016-7997, CVE-2016-8682, CVE-2016-8683, CVE-2016-8684, CVE-2016-9830, CVE-2017-6335, CVE-2017-8350, CVE-2017-10794, CVE-2017-10799, CVE-2017-10800, CVE-2017-11403 and possibly several other security issues with and without associated CVE number.
- Record
MGASA-2017-0229- Updated
- 2026-11-02
OSVSUSE-SU-2016:2667-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact.
- CVE-2016-8684: Mismatch between real filesize and header values (bsc#1005123)
- CVE-2016-8683: Check that filesize is reasonable compared to the header value (bsc#1005127)
- CVE-2016-8682: Stack-buffer read overflow while reading SCT header (bsc#1005125)
- CVE-2016-8677: Memory allocation failure in AcquireQuantumPixels (bsc#1005328)
- CVE-2016-7996, CVE-2016-7997: WPG Reader Issues (bsc#1003629)
- CVE-2016-7800: 8BIM/8BIMW unsigned underflow leads to heap overflow (bsc#1002422)
- CVE-2016-7799: mogrify global buffer overflow (bsc#1002421)
- CVE-2016-7540: writing to RGF format aborts (bsc#1000394)
- CVE-2016-7539: Potential DOS by not releasing memory (bsc#1000715)
- CVE-2016-7538: SIGABRT for corrupted pdb file (bsc#1000712)
- CVE-2016-7537: Out of bound access for corrupted pdb file (bsc#1000711)
- CVE-2016-7535: Out of bound access for corrupted psd file (bsc#1000709)
- CVE-2016-7534: Out of bound access in generic decoder (bsc#1000708)
- CVE-2016-7533: Wpg file out of bound for corrupted file (bsc#1000707)
- CVE-2016-7532: fix handling of corrupted psd file (bsc#1000706)
- CVE-2016-7531: Pbd file out of bound access (bsc#1000704)
- CVE-2016-7530: Out of bound in quantum handling (bsc#1000703)
- CVE-2016-7529: Out-of-bound in quantum handling (bsc#1000399)
- CVE-2016-7528: Out-of-bound access in xcf file coder (bsc#1000434)
- CVE-2016-7527: Out-of-bound access in wpg file coder: (bsc#1000436)
- CVE-2016-7526: out-of-bounds write in ./MagickCore/pixel-accessor.h (bsc#1000702)
- CVE-2016-7525: Heap buffer overflow in psd file coder (bsc#1000701)
- CVE-2016-7524: AddressSanitizer:heap-buffer-overflow READ of size 1 in meta.c:465 (bsc#1000700)
- CVE-2016-7523: AddressSanitizer:heap-buffer-overflow READ of size 1 meta.c:496 (bsc#1000699)
- CVE-2016-7522: Out of bound access for malformed psd file (bsc#1000698)
- CVE-2016-7521: Heap buffer overflow in psd file handling (bsc#1000697)
- CVE-2016-7520: Heap overflow in hdr file handling (bsc#1000696)
- CVE-2016-7519: Out-of-bounds read in coders/rle.c (bsc#1000695)
- CVE-2016-7518: Out-of-bounds read in coders/sun.c (bsc#1000694)
- CVE-2016-7517: Out-of-bounds read in coders/pict.c (bsc#1000693)
- CVE-2016-7516: Out-of-bounds problem in rle, pict, viff and sun files (bsc#1000692)
- CVE-2016-7515: Rle file handling for corrupted file (bsc#1000689)
- CVE-2016-7514: Out-of-bounds read in coders/psd.c (bsc#1000688)
- CVE-2016-7513: Off-by-one error leading to segfault (bsc#1000686)
- CVE-2016-7101: raphicsMagick: SGI Coder Out-Of-Bounds Read Vulnerability (bsc#1001221)
- CVE-2016-6823: raphicsMagick: BMP Coder Out-Of-Bounds Write Vulnerability (bsc#1001066)
- CVE-2015-8959: dOS due to corrupted DDS files (bsc#1000713)
- CVE-2015-8958: Potential DOS in sun file handling due to malformed files (bsc#1000691)
- CVE-2015-8957: Buffer overflow in sun file handling (bsc#1000690)
- CVE-2014-9907: DOS due to corrupted DDS files (bsc#1000714)
- Buffer overflows in SIXEL, PDB, MAP, and TIFF coders (bsc#1002209)
- Divide by zero in WriteTIFFImage (bsc#1002206)
- Record
SUSE-SU-2016:2667-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:2724-1 No score
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issues:
These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact.
- CVE-2016-8684: Mismatch between real filesize and header values (bsc#1005123)
- CVE-2016-8683: Check that filesize is reasonable compared to the header value (bsc#1005127)
- CVE-2016-8682: Stack-buffer read overflow while reading SCT header (bsc#1005125)
- CVE-2016-7996, CVE-2016-7997: WPG Reader Issues (bsc#1003629)
- CVE-2016-7800: 8BIM/8BIMW unsigned underflow leads to heap overflow (bsc#1002422)
- CVE-2016-7537: Out of bound access for corrupted pdb file (bsc#1000711)
- CVE-2016-7533: Wpg file out of bound for corrupted file (bsc#1000707)
- CVE-2016-7531: Pbd file out of bound access (bsc#1000704)
- CVE-2016-7529: Out-of-bound in quantum handling (bsc#1000399)
- CVE-2016-7528: Out-of-bound access in xcf file coder (bsc#1000434)
- CVE-2016-7527: Out-of-bound access in wpg file coder: (bsc#1000436)
- CVE-2016-7524: AddressSanitizer:heap-buffer-overflow READ of size 1 in meta.c:465 (bsc#1000700)
- CVE-2016-7522: Out of bound access for malformed psd file (bsc#1000698)
- CVE-2016-7519: Out-of-bounds read in coders/rle.c (bsc#1000695)
- CVE-2016-7517: Out-of-bounds read in coders/pict.c (bsc#1000693)
- CVE-2016-7516: Out-of-bounds problem in rle, pict, viff and sun files (bsc#1000692)
- CVE-2016-7515: Rle file handling for corrupted file (bsc#1000689)
- CVE-2016-7446 CVE-2016-7447 CVE-2016-7448 CVE-2016-7449: various issues fixed in 1.3.25 (bsc#999673)
- CVE-2016-7101: SGI Coder Out-Of-Bounds Read Vulnerability (bsc#1001221)
- CVE-2016-6823: BMP Coder Out-Of-Bounds Write Vulnerability (bsc#1001066)
- CVE-2015-8958: Potential DOS in sun file handling due to malformed files (bsc#1000691)
- CVE-2015-8957: Buffer overflow in sun file handling (bsc#1000690)
- Divide by zero in WriteTIFFImage (bsc#1002206)
- Buffer overflows in SIXEL, PDB, MAP, and TIFF coders (bsc#1002209)
- Record
SUSE-SU-2016:2724-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:2964-1 No score
Security update for ImageMagick
This update for ImageMagick fixes the following issues:
These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact.
- CVE-2016-8862: Memory allocation failure in AcquireMagickMemory (bsc#1007245)
- CVE-2014-9907: DOS due to corrupted DDS files (bsc#1000714)
- CVE-2015-8959: DOS due to corrupted DDS files (bsc#1000713)
- CVE-2016-7537: Out of bound access for corrupted pdb file (bsc#1000711)
- CVE-2016-6823: BMP Coder Out-Of-Bounds Write Vulnerability (bsc#1001066)
- CVE-2016-7514: Out-of-bounds read in coders/psd.c (bsc#1000688)
- CVE-2016-7515: Rle file handling for corrupted file (bsc#1000689)
- CVE-2016-7529: out of bound in quantum handling (bsc#1000399)
- CVE-2016-7101: SGI Coder Out-Of-Bounds Read Vulnerability (bsc#1001221)
- CVE-2016-7527: out of bound access in wpg file coder: (bsc#1000436)
- CVE-2016-7996, CVE-2016-7997: WPG Reader Issues (bsc#1003629)
- CVE-2016-7528: out of bound access in xcf file coder (bsc#1000434)
- CVE-2016-8683: Check that filesize is reasonable compared to the header value (bsc#1005127)
- CVE-2016-8682: Stack-buffer read overflow while reading SCT header (bsc#1005125)
- CVE-2016-8684: Mismatch between real filesize and header values (bsc#1005123)
- Buffer overflows in SIXEL, PDB, MAP, and TIFF coders (bsc#1002209)
- CVE-2016-7525: Heap buffer overflow in psd file coder (bsc#1000701)
- CVE-2016-7524: AddressSanitizer:heap-buffer-overflow READ of size 1 in meta.c:465 (bsc#1000700)
- CVE-2016-7530: Out of bound in quantum handling (bsc#1000703)
- CVE-2016-7531: Pbd file out of bound access (bsc#1000704)
- CVE-2016-7533: Wpg file out of bound for corrupted file (bsc#1000707)
- CVE-2016-7535: Out of bound access for corrupted psd file (bsc#1000709)
- CVE-2016-7522: Out of bound access for malformed psd file (bsc#1000698)
- CVE-2016-7517: out-of-bounds read in coders/pict.c (bsc#1000693)
- CVE-2016-7516: Out of bounds problem in rle, pict, viff and sun files (bsc#1000692)
- CVE-2015-8958: Potential DOS in sun file handling due to malformed files (bsc#1000691)
- CVE-2015-8957: Buffer overflow in sun file handling (bsc#1000690)
- CVE-2016-7519: out-of-bounds read in coders/rle.c (bsc#1000695)
- CVE-2016-7518: out-of-bounds read in coders/sun.c (bsc#1000694)
- CVE-2016-7800: 8BIM/8BIMW unsigned underflow leads to heap overflow (bsc#1002422)
- CVE-2016-7523: AddressSanitizer:heap-buffer-overflow READ of size 1 meta.c:496 (bsc#1000699)
- CVE-2016-7799: mogrify global buffer overflow (bsc#1002421)
- Record
SUSE-SU-2016:2964-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
graphicsmagickDebian:12 |
before 1.3.25-5 | 1.3.25-5 |
graphicsmagickDebian:13 |
before 1.3.25-5 | 1.3.25-5 |
graphicsmagickDebian:14 |
before 1.3.25-5 | 1.3.25-5 |
graphicsmagickDebian:7 |
before 1.3.16-1.1+deb7u5, plus listed versions 1.3.16-1.11.3.16-1.1+deb7u11.3.16-1.1+deb7u21.3.16-1.1+deb7u31.3.16-1.1+deb7u4 |
1.3.16-1.1+deb7u5 |
graphicsmagickDebian:8 |
before 1.3.20-3+deb8u2, plus listed versions 1.3.20-3+deb8u1 |
1.3.20-3+deb8u2 |
graphicsmagickMageia:5 |
before 1.3.25-1.3.mga5 | 1.3.25-1.3.mga5 |
graphicsmagickMageia:5 |
before 1.3.26-1.1.mga5 | 1.3.26-1.1.mga5 |
graphicsmagickMageia:6 |
before 1.3.26-1.1.mga6 | 1.3.26-1.1.mga6 |
ImageMagickSUSE:Linux Enterprise Desktop 12 SP1 |
before 6.8.8.1-40.1 | 6.8.8.1-40.1 |
ImageMagickSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 6.8.8.1-40.1 | 6.8.8.1-40.1 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ImageMagickSUSE:Linux Enterprise Server 12 SP1 |
before 6.8.8.1-40.1 | 6.8.8.1-40.1 |
ImageMagickSUSE:Linux Enterprise Server for SAP Applications 12 SP1 |
before 6.8.8.1-40.1 | 6.8.8.1-40.1 |
ImageMagickSUSE:Linux Enterprise Workstation Extension 12 SP1 |
before 6.8.8.1-40.1 | 6.8.8.1-40.1 |
GraphicsMagickSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 1.2.5-4.46.1 | 1.2.5-4.46.1 |
GraphicsMagickSUSE:Studio Onsite 1.3 |
before 1.2.5-4.46.1 | 1.2.5-4.46.1 |
ImageMagickSUSE:Linux Enterprise Software Development Kit 11 SP4 |
before 6.4.3.6-7.54.1 | 6.4.3.6-7.54.1 |
ImageMagickSUSE:Linux Enterprise Server 11 SP4 |
before 6.4.3.6-7.54.1 | 6.4.3.6-7.54.1 |
ImageMagickSUSE:Linux Enterprise Server for SAP Applications 11 SP4 |
before 6.4.3.6-7.54.1 | 6.4.3.6-7.54.1 |
graphicsmagickUbuntu:14.04:LTS |
before 1.3.18-1ubuntu3.1, plus listed versions 1.3.16-1.1ubuntu21.3.16-1.1ubuntu31.3.18-1ubuntu3 |
1.3.18-1ubuntu3.1 |
graphicsmagickUbuntu:16.04:LTS |
before 1.3.23-1ubuntu0.1, plus listed versions 1.3.21-31.3.23-11.3.23-1build1 |
1.3.23-1ubuntu0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-8682 is a high vulnerability (CVSS 7.5) in Graphicsmagick, published October 25, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.55%, the 89th percentile. Fixed in graphicsmagick 1.3.25-5.
References
lists.opensuse.org/opensuse-updates/2016-10/msg00094.html
openwall.com/lists/oss-security/2016/10/16/6
securityfocus.com/bid/93597
bugzilla.redhat.com/show_bug.cgi?id=1385583
debian.org/security/2016/dsa-3746
hg.code.sf.net/p/graphicsmagick/code/rev/0a0dfa81906d
Show 108 moreShow less
blogs.gentoo.org/ago/2016/09/15/graphicsmagick-stack-based-buffer-overflow-in-readsctimage-sct-c
nvd.nist.gov/vuln/detail/CVE-2016-8682
github.com/advisories/GHSA-pqjj-r7v2-357p
security-tracker.debian.org/tracker/CVE-2016-8682
advisories.mageia.org/MGASA-2016-0357.html
bugs.mageia.org/show_bug.cgi?id=19602
openwall.com/lists/oss-security/2016/10/16/7
graphicsmagick.org/NEWS.html
suse.com/support/update/announcement/2016/suse-su-20162667-1
bugzilla.suse.com/1000394
ubuntu.com/security/CVE-2016-8682
cve.org/CVERecord?id=CVE-2016-8682