{"id":"CVE-2016-10048","aliases":["DEBIAN-CVE-2016-10048","DLA-731-1","DSA-3652-1","EUVD-2016-1242","GHSA-c3pw-9g68-56j8","SUSE-SU-2017:0518-1","SUSE-SU-2017:0529-1","SUSE-SU-2017:0586-1","UBUNTU-CVE-2016-10048"],"status":"published","title":"Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote...","description":"Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.06534,"percentile":0.93826,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2016-08-25T00:00:00Z","modified":"2026-10-24T14:04:06Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.5.7+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.5.7+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.5.7+dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","fixed_in":["8:6.7.7.10-6ubuntu3.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.5.7+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.5.7+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.5.7+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-5+deb7u8"}]}],"versions":["8:6.7.7.10-5","8:6.7.7.10-5+deb7u2","8:6.7.7.10-5+deb7u3","8:6.7.7.10-5+deb7u4","8:6.7.7.10-5+deb7u5","8:6.7.7.10-5+deb7u6","8:6.7.7.10-5+deb7u7"],"bundled":94},{"source":"osv","ecosystem":"Debian:8","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-5+deb8u4"}]}],"versions":["8:6.8.9.9-5","8:6.8.9.9-5+deb8u1","8:6.8.9.9-5+deb8u2","8:6.8.9.9-5+deb8u3"],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.62.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.62.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.65.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.65.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.65.1"}]}],"bundled":21},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.2"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.2"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1"]}],"products":[{"vendor":"imagemagick","product":"imagemagick"},{"vendor":"opensuse_project","product":"leap"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410451","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/fc6080f1321fd21e86ef916195cc110b05d9effb","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/95186","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/12/26/9","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10048"},{"url":"https://github.com/advisories/GHSA-c3pw-9g68-56j8"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-10048","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170518-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1017310","tags":["report"]},{"url":"https://bugzilla.suse.com/1017311","tags":["report"]},{"url":"https://bugzilla.suse.com/1017312","tags":["report"]},{"url":"https://bugzilla.suse.com/1017313","tags":["report"]},{"url":"https://bugzilla.suse.com/1017318","tags":["report"]},{"url":"https://bugzilla.suse.com/1017321","tags":["report"]},{"url":"https://bugzilla.suse.com/1017322","tags":["report"]},{"url":"https://bugzilla.suse.com/1017324","tags":["report"]},{"url":"https://bugzilla.suse.com/1017326","tags":["report"]},{"url":"https://bugzilla.suse.com/1020443","tags":["report"]},{"url":"https://bugzilla.suse.com/1020448","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5511","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170529-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1017308","tags":["report"]},{"url":"https://bugzilla.suse.com/1017314","tags":["report"]},{"url":"https://bugzilla.suse.com/1017319","tags":["report"]},{"url":"https://bugzilla.suse.com/1017320","tags":["report"]},{"url":"https://bugzilla.suse.com/1017325","tags":["report"]},{"url":"https://bugzilla.suse.com/1017421","tags":["report"]},{"url":"https://bugzilla.suse.com/1020433","tags":["report"]},{"url":"https://bugzilla.suse.com/1020435","tags":["report"]},{"url":"https://bugzilla.suse.com/1020436","tags":["report"]},{"url":"https://bugzilla.suse.com/1020439","tags":["report"]},{"url":"https://bugzilla.suse.com/1020441","tags":["report"]},{"url":"https://bugzilla.suse.com/1020446","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5510","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170586-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-10048","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/12/20/3","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10048","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-10048","description":"Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.","status":"published","published":"2017-03-23T17:00:00Z","modified":"2024-08-06T03:07:32.132Z","updated_at":"2026-11-02T14:33:31.450804Z"}],"euvd":[{"id":"EUVD-2016-1242","description":"Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.","status":"published","published":"2017-03-23T17:00:00Z","modified":"2024-08-06T03:07:32Z","updated_at":"2026-11-03T02:22:25.285099Z"}],"ghsa":[{"id":"GHSA-c3pw-9g68-56j8","title":"Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote...","description":"Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.","status":"published","published":"2022-05-17T02:54:01Z","modified":"2023-01-27T05:06:21Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:42:54.023332Z"}],"nvd":[{"id":"CVE-2016-10048","description":"Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.","status":"published","published":"2017-03-23T17:59:00.343Z","modified":"2026-06-17T00:38:57.433Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:03:37.238712Z"}],"osv":[{"id":"CVE-2016-10048","description":"Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.","status":"published","published":"2017-03-23T17:59:00.343Z","modified":"2026-10-24T14:04:06.83490807Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:01.531338Z"},{"id":"DEBIAN-CVE-2016-10048","description":"Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.","status":"published","published":"2017-03-23T17:59:00.343Z","modified":"2026-09-22T07:00:14.99555647Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"UBUNTU-CVE-2016-10048","description":"Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.","status":"published","published":"2017-03-23T17:59:00Z","modified":"2026-04-22T10:27:08.607742Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:11.100633Z"},{"id":"DLA-731-1","title":"imagemagick - security update","status":"published","published":"2016-12-02T00:00:00Z","modified":"2026-03-09T01:18:39.822432Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3652-1","title":"imagemagick - security update","status":"published","published":"2016-08-25T00:00:00Z","modified":"2026-03-09T01:21:33.783244Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"SUSE-SU-2017:0518-1","title":"Security update for GraphicsMagick","description":"\nThis update for GraphicsMagick fixes several issues.\n\nThese security issues were fixed: \n\n- CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped (bsc#1017310).\n- CVE-2016-10049: Corrupt RLE files could have overflowed a buffer due to a incorrect length calculation (bsc#1017311).\n- CVE-2016-10050: Corrupt RLE files could have overflowed a heap buffer due to a missing offset check (bsc#1017312).\n- CVE-2016-10051: Fixed use after free when reading PWP files (bsc#1017313).\n- CVE-2016-10059: Unchecked calculation when reading TIFF files could have lead to a buffer overflow (bsc#1017318).\n- CVE-2016-10064: Improved checks for buffer overflow when reading TIFF files (bsc#1017321).\n- CVE-2016-10065: Unchecked calculations when reading VIFF files could have lead to out of bound reads (bsc#1017322).\n- CVE-2016-10068: Prevent NULL pointer access when using the MSL interpreter (bsc#1017324).\n- CVE-2016-10070: Prevent allocating the wrong amount of memory when reading mat files (bsc#1017326).\n- CVE-2016-10146: Captions and labels were handled incorrectly, causing a memory leak that could have lead to DoS (bsc#1020443).\n- CVE-2017-5511: A missing cast when reading PSD files could have caused memory corruption by a heap overflow (bsc#1020448).\n","status":"published","published":"2017-02-20T10:12:32Z","modified":"2026-02-04T03:57:27.734783Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0529-1","title":"Security update for ImageMagick","description":"\n\nThis update for ImageMagick fixes the following issues:\n\n- CVE-2016-10046: Prevent buffer overflow in draw.c caused by an incorrect length calculation (bsc#1017308)\n- CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped (bsc#1017310)\n- CVE-2016-10049: Corrupt RLE files could have overflowed a buffer due to a incorrect length calculation (bsc#1017311)\n- CVE-2016-10050: Corrupt RLE files could have overflowed a heap buffer due to a missing offset check (bsc#1017312)\n- CVE-2016-10051: Fixed use after free when reading PWP files (bsc#1017313)\n- CVE-2016-10052: Added bound check to exif parsing of JPEG files (bsc#1017314)\n- CVE-2016-10059: Unchecked calculation when reading TIFF files could have lead to a buffer overflow (bsc#1017318)\n- CVE-2016-10060: Improved error handling when writing files to not mask errors (bsc#1017319)\n- CVE-2016-10061: Improved error handling when writing files to not mask errors (bsc#1017319).\n- CVE-2016-10062: Improved error handling when writing files to not mask errors (bsc#1017319).\n- CVE-2016-10063: Check validity of extend during TIFF file reading (bsc#1017320)\n- CVE-2016-10064: Improved checks for buffer overflow when reading TIFF files (bsc#1017321)\n- CVE-2016-10065: Unchecked calculations when reading VIFF files could have lead to out of bound reads (bsc#1017322)\n- CVE-2016-10068: Prevent NULL pointer access when using the MSL interpreter (bsc#1017324)\n- CVE-2016-10069: Add check for invalid mat file (bsc#1017325).\n- CVE-2016-10070: Prevent allocating the wrong amount of memory when reading mat files (bsc#1017326)\n- CVE-2016-10071: Prevent allocating the wrong amount of memory when reading mat files (bsc#1017326)\n- CVE-2016-10144: Added a check after allocating memory when parsing IPL files (bsc#1020433)\n- CVE-2016-10145: Fixed of-by-one in string copy operation when parsing WPG files (bsc#1020435)\n- CVE-2016-10146: Captions and labels were handled incorrectly, causing a memory leak that could have lead to DoS (bsc#1020443)\n- CVE-2017-5506: Missing offset check leading to a double-free (bsc#1020436)\n- CVE-2017-5507: Fixed a memory leak when reading MPC files allowing for DoS (bsc#1020439)\n- CVE-2017-5508: Increase the amount of memory allocated for TIFF pixels to prevent a heap buffer-overflow (bsc#1020441)\n- CVE-2017-5510: Prevent out-of-bounds write when reading PSD files (bsc#1020446).\n- CVE-2017-5511: A missing cast when reading PSD files could have caused memory corruption by a heap overflow (bsc#1020448)\n\nThis update removes the fix for CVE-2016-9773. ImageMagick-6 was not affected by CVE-2016-9773 and it caused a regression (at least in GraphicsMagick) (bsc#1017421).\n","status":"published","published":"2017-02-21T10:02:51Z","modified":"2026-02-04T03:37:29.815225Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0586-1","title":"Security update for ImageMagick","description":"\nThis update for ImageMagick fixes the following issues:\n\n- CVE-2016-10046: Prevent buffer overflow in draw.c caused by an incorrect length calculation (bsc#1017308)\n- CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped (bsc#1017310)\n- CVE-2016-10049: Corrupt RLE files could have overflowed a buffer due to a incorrect length calculation (bsc#1017311)\n- CVE-2016-10050: Corrupt RLE files could have overflowed a heap buffer due to a missing offset check (bsc#1017312)\n- CVE-2016-10051: Fixed use after free when reading PWP files (bsc#1017313)\n- CVE-2016-10052: Added bound check to exif parsing of JPEG files (bsc#1017314).\n- CVE-2016-10059: Unchecked calculation when reading TIFF files could have lead to a buffer overflow (bsc#1017318)\n- CVE-2016-10060: Improved error handling when writing files to not mask errors (bsc#1017319).\n- CVE-2016-10063: Check validity of extend during TIFF file reading (bsc#1017320).\n- CVE-2016-10064: Improved checks for buffer overflow when reading TIFF files (bsc#1017321)\n- CVE-2016-10065: Unchecked calculations when reading VIFF files could have lead to out of bound reads (bsc#1017322)\n- CVE-2016-10068: Prevent NULL pointer access when using the MSL interpreter (bsc#1017324)\n- CVE-2016-10070: Prevent allocating the wrong amount of memory when reading mat files (bsc#1017326)\n- CVE-2016-10071: Prevent allocating the wrong amount of memory when reading mat files (bsc#1017326).\n- CVE-2016-10144: Added a check after allocating memory when parsing IPL files (bsc#1020433).\n- CVE-2016-10145: Fixed of-by-one in string copy operation when parsing WPG files (bsc#1020435).\n- CVE-2016-10146: Captions and labels were handled incorrectly, causing a memory leak that could have lead to DoS (bsc#1020443)\n- CVE-2017-5506: Missing offset check leading to a double-free (bsc#1020436).\n- CVE-2017-5507: Fixed a memory leak when reading MPC files allowing for DoS (bsc#1020439).\n- CVE-2017-5508: Increase the amount of memory allocated for TIFF pixels to prevent a heap buffer-overflow (bsc#1020441).\n- CVE-2017-5511: A missing cast when reading PSD files could have caused memory corruption by a heap overflow (bsc#1020448)\n\nThis update removes the fix for CVE-2016-9773. ImageMagick-6 was not affected by CVE-2016-9773 and it caused a regression (at least in GraphicsMagick) (bsc#1017421).\n","status":"published","published":"2017-03-01T15:51:34Z","modified":"2026-02-04T02:21:35.708368Z","updated_at":"2026-11-02T15:53:43.83457Z"}]}}