{"id":"CVE-2016-10050","aliases":["DEBIAN-CVE-2016-10050","DLA-731-1","DSA-3652-1","EUVD-2016-1244","GHSA-c3fp-g3hp-p3jr","SUSE-SU-2017:0518-1","SUSE-SU-2017:0529-1","SUSE-SU-2017:0586-1","SUSE-SU-2017:1599-1","UBUNTU-CVE-2016-10050"],"status":"published","title":"Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8...","description":"Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02101,"percentile":0.81834,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2016-08-25T00:00:00Z","modified":"2026-10-24T14:03:52Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.6.2+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.6.2+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.6.2+dfsg-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","fixed_in":["8:6.7.7.10-6ubuntu3.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","fixed_in":["8:6.8.9.9-7ubuntu5.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.6.2+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.6.2+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.6.2+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-5+deb7u8"}]}],"versions":["8:6.7.7.10-5","8:6.7.7.10-5+deb7u2","8:6.7.7.10-5+deb7u3","8:6.7.7.10-5+deb7u4","8:6.7.7.10-5+deb7u5","8:6.7.7.10-5+deb7u6","8:6.7.7.10-5+deb7u7"],"bundled":94},{"source":"osv","ecosystem":"Debian:8","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-5+deb8u4"}]}],"versions":["8:6.8.9.9-5","8:6.8.9.9-5+deb8u1","8:6.8.9.9-5+deb8u2","8:6.8.9.9-5+deb8u3"],"bundled":52},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.62.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.62.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-59.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.65.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.65.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.65.1"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.77.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.77.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.77.1"}]}],"bundled":25},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-6ubuntu3.2"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.2"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1"]}],"products":[{"vendor":"imagemagick","product":"imagemagick"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"http://www.securityfocus.com/bid/95185","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/73fb0aac5b958521e1511e179ecc0ad49f70ebaf","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410454","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/12/26/9","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/139d4323c40d7363bfdd2382c3821a6f76d69430","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10050"},{"url":"https://github.com/advisories/GHSA-c3fp-g3hp-p3jr"},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-10050","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170518-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1017310","tags":["report"]},{"url":"https://bugzilla.suse.com/1017311","tags":["report"]},{"url":"https://bugzilla.suse.com/1017312","tags":["report"]},{"url":"https://bugzilla.suse.com/1017313","tags":["report"]},{"url":"https://bugzilla.suse.com/1017318","tags":["report"]},{"url":"https://bugzilla.suse.com/1017321","tags":["report"]},{"url":"https://bugzilla.suse.com/1017322","tags":["report"]},{"url":"https://bugzilla.suse.com/1017324","tags":["report"]},{"url":"https://bugzilla.suse.com/1017326","tags":["report"]},{"url":"https://bugzilla.suse.com/1020443","tags":["report"]},{"url":"https://bugzilla.suse.com/1020448","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10048","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10049","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10051","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10064","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10065","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10068","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10070","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5511","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170529-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1017308","tags":["report"]},{"url":"https://bugzilla.suse.com/1017314","tags":["report"]},{"url":"https://bugzilla.suse.com/1017319","tags":["report"]},{"url":"https://bugzilla.suse.com/1017320","tags":["report"]},{"url":"https://bugzilla.suse.com/1017325","tags":["report"]},{"url":"https://bugzilla.suse.com/1017421","tags":["report"]},{"url":"https://bugzilla.suse.com/1020433","tags":["report"]},{"url":"https://bugzilla.suse.com/1020435","tags":["report"]},{"url":"https://bugzilla.suse.com/1020436","tags":["report"]},{"url":"https://bugzilla.suse.com/1020439","tags":["report"]},{"url":"https://bugzilla.suse.com/1020441","tags":["report"]},{"url":"https://bugzilla.suse.com/1020446","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10046","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10060","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10061","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10062","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10071","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10144","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10145","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5510","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170586-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171599-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1033091","tags":["report"]},{"url":"https://bugzilla.suse.com/1034870","tags":["report"]},{"url":"https://bugzilla.suse.com/1034872","tags":["report"]},{"url":"https://bugzilla.suse.com/1034876","tags":["report"]},{"url":"https://bugzilla.suse.com/1036976","tags":["report"]},{"url":"https://bugzilla.suse.com/1036978","tags":["report"]},{"url":"https://bugzilla.suse.com/1036980","tags":["report"]},{"url":"https://bugzilla.suse.com/1036981","tags":["report"]},{"url":"https://bugzilla.suse.com/1036983","tags":["report"]},{"url":"https://bugzilla.suse.com/1036984","tags":["report"]},{"url":"https://bugzilla.suse.com/1036985","tags":["report"]},{"url":"https://bugzilla.suse.com/1036986","tags":["report"]},{"url":"https://bugzilla.suse.com/1036987","tags":["report"]},{"url":"https://bugzilla.suse.com/1036988","tags":["report"]},{"url":"https://bugzilla.suse.com/1036989","tags":["report"]},{"url":"https://bugzilla.suse.com/1036990","tags":["report"]},{"url":"https://bugzilla.suse.com/1037527","tags":["report"]},{"url":"https://bugzilla.suse.com/1038000","tags":["report"]},{"url":"https://bugzilla.suse.com/1040025","tags":["report"]},{"url":"https://bugzilla.suse.com/1040303","tags":["report"]},{"url":"https://bugzilla.suse.com/1040304","tags":["report"]},{"url":"https://bugzilla.suse.com/1040306","tags":["report"]},{"url":"https://bugzilla.suse.com/1040332","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9846","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7943","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8346","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8348","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8350","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8352","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8354","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9098","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9142","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9144","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-10050","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2016/12/20/3","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10050","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-10050","description":"Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.","status":"published","published":"2017-03-23T17:00:00Z","modified":"2024-08-06T03:07:32.085Z","updated_at":"2026-11-02T14:33:31.117878Z"}],"euvd":[{"id":"EUVD-2016-1244","description":"Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.","status":"published","published":"2017-03-23T17:00:00Z","modified":"2024-08-06T03:07:32Z","updated_at":"2026-11-03T02:22:25.285099Z"}],"ghsa":[{"id":"GHSA-c3fp-g3hp-p3jr","title":"Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8...","description":"Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.","status":"published","published":"2022-05-13T01:13:30Z","modified":"2023-02-01T05:04:17Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:50:08.411477Z"}],"nvd":[{"id":"CVE-2016-10050","description":"Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.","status":"published","published":"2017-03-23T17:59:00.437Z","modified":"2026-06-17T00:38:57.69Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:37.238712Z"}],"osv":[{"id":"CVE-2016-10050","description":"Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.","status":"published","published":"2017-03-23T17:59:00.437Z","modified":"2026-10-24T14:03:52.309362163Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:01.531338Z"},{"id":"DEBIAN-CVE-2016-10050","description":"Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.","status":"published","published":"2017-03-23T17:59:00.437Z","modified":"2026-09-22T07:01:07.773068498Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"UBUNTU-CVE-2016-10050","description":"Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.","status":"published","published":"2017-03-23T17:59:00Z","modified":"2026-04-22T10:28:20.725156Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:11.100633Z"},{"id":"DLA-731-1","title":"imagemagick - security update","status":"published","published":"2016-12-02T00:00:00Z","modified":"2026-03-09T01:18:39.822432Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3652-1","title":"imagemagick - security update","status":"published","published":"2016-08-25T00:00:00Z","modified":"2026-03-09T01:21:33.783244Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"SUSE-SU-2017:0518-1","title":"Security update for GraphicsMagick","description":"\nThis update for GraphicsMagick fixes several issues.\n\nThese security issues were fixed: \n\n- CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped (bsc#1017310).\n- CVE-2016-10049: Corrupt RLE files could have overflowed a buffer due to a incorrect length calculation (bsc#1017311).\n- CVE-2016-10050: Corrupt RLE files could have overflowed a heap buffer due to a missing offset check (bsc#1017312).\n- CVE-2016-10051: Fixed use after free when reading PWP files (bsc#1017313).\n- CVE-2016-10059: Unchecked calculation when reading TIFF files could have lead to a buffer overflow (bsc#1017318).\n- CVE-2016-10064: Improved checks for buffer overflow when reading TIFF files (bsc#1017321).\n- CVE-2016-10065: Unchecked calculations when reading VIFF files could have lead to out of bound reads (bsc#1017322).\n- CVE-2016-10068: Prevent NULL pointer access when using the MSL interpreter (bsc#1017324).\n- CVE-2016-10070: Prevent allocating the wrong amount of memory when reading mat files (bsc#1017326).\n- CVE-2016-10146: Captions and labels were handled incorrectly, causing a memory leak that could have lead to DoS (bsc#1020443).\n- CVE-2017-5511: A missing cast when reading PSD files could have caused memory corruption by a heap overflow (bsc#1020448).\n","status":"published","published":"2017-02-20T10:12:32Z","modified":"2026-02-04T03:57:27.734783Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0529-1","title":"Security update for ImageMagick","description":"\n\nThis update for ImageMagick fixes the following issues:\n\n- CVE-2016-10046: Prevent buffer overflow in draw.c caused by an incorrect length calculation (bsc#1017308)\n- CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped (bsc#1017310)\n- CVE-2016-10049: Corrupt RLE files could have overflowed a buffer due to a incorrect length calculation (bsc#1017311)\n- CVE-2016-10050: Corrupt RLE files could have overflowed a heap buffer due to a missing offset check (bsc#1017312)\n- CVE-2016-10051: Fixed use after free when reading PWP files (bsc#1017313)\n- CVE-2016-10052: Added bound check to exif parsing of JPEG files (bsc#1017314)\n- CVE-2016-10059: Unchecked calculation when reading TIFF files could have lead to a buffer overflow (bsc#1017318)\n- CVE-2016-10060: Improved error handling when writing files to not mask errors (bsc#1017319)\n- CVE-2016-10061: Improved error handling when writing files to not mask errors (bsc#1017319).\n- CVE-2016-10062: Improved error handling when writing files to not mask errors (bsc#1017319).\n- CVE-2016-10063: Check validity of extend during TIFF file reading (bsc#1017320)\n- CVE-2016-10064: Improved checks for buffer overflow when reading TIFF files (bsc#1017321)\n- CVE-2016-10065: Unchecked calculations when reading VIFF files could have lead to out of bound reads (bsc#1017322)\n- CVE-2016-10068: Prevent NULL pointer access when using the MSL interpreter (bsc#1017324)\n- CVE-2016-10069: Add check for invalid mat file (bsc#1017325).\n- CVE-2016-10070: Prevent allocating the wrong amount of memory when reading mat files (bsc#1017326)\n- CVE-2016-10071: Prevent allocating the wrong amount of memory when reading mat files (bsc#1017326)\n- CVE-2016-10144: Added a check after allocating memory when parsing IPL files (bsc#1020433)\n- CVE-2016-10145: Fixed of-by-one in string copy operation when parsing WPG files (bsc#1020435)\n- CVE-2016-10146: Captions and labels were handled incorrectly, causing a memory leak that could have lead to DoS (bsc#1020443)\n- CVE-2017-5506: Missing offset check leading to a double-free (bsc#1020436)\n- CVE-2017-5507: Fixed a memory leak when reading MPC files allowing for DoS (bsc#1020439)\n- CVE-2017-5508: Increase the amount of memory allocated for TIFF pixels to prevent a heap buffer-overflow (bsc#1020441)\n- CVE-2017-5510: Prevent out-of-bounds write when reading PSD files (bsc#1020446).\n- CVE-2017-5511: A missing cast when reading PSD files could have caused memory corruption by a heap overflow (bsc#1020448)\n\nThis update removes the fix for CVE-2016-9773. ImageMagick-6 was not affected by CVE-2016-9773 and it caused a regression (at least in GraphicsMagick) (bsc#1017421).\n","status":"published","published":"2017-02-21T10:02:51Z","modified":"2026-02-04T03:37:29.815225Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0586-1","title":"Security update for ImageMagick","description":"\nThis update for ImageMagick fixes the following issues:\n\n- CVE-2016-10046: Prevent buffer overflow in draw.c caused by an incorrect length calculation (bsc#1017308)\n- CVE-2016-10048: Arbitrary module could have been load because relative path were not escaped (bsc#1017310)\n- CVE-2016-10049: Corrupt RLE files could have overflowed a buffer due to a incorrect length calculation (bsc#1017311)\n- CVE-2016-10050: Corrupt RLE files could have overflowed a heap buffer due to a missing offset check (bsc#1017312)\n- CVE-2016-10051: Fixed use after free when reading PWP files (bsc#1017313)\n- CVE-2016-10052: Added bound check to exif parsing of JPEG files (bsc#1017314).\n- CVE-2016-10059: Unchecked calculation when reading TIFF files could have lead to a buffer overflow (bsc#1017318)\n- CVE-2016-10060: Improved error handling when writing files to not mask errors (bsc#1017319).\n- CVE-2016-10063: Check validity of extend during TIFF file reading (bsc#1017320).\n- CVE-2016-10064: Improved checks for buffer overflow when reading TIFF files (bsc#1017321)\n- CVE-2016-10065: Unchecked calculations when reading VIFF files could have lead to out of bound reads (bsc#1017322)\n- CVE-2016-10068: Prevent NULL pointer access when using the MSL interpreter (bsc#1017324)\n- CVE-2016-10070: Prevent allocating the wrong amount of memory when reading mat files (bsc#1017326)\n- CVE-2016-10071: Prevent allocating the wrong amount of memory when reading mat files (bsc#1017326).\n- CVE-2016-10144: Added a check after allocating memory when parsing IPL files (bsc#1020433).\n- CVE-2016-10145: Fixed of-by-one in string copy operation when parsing WPG files (bsc#1020435).\n- CVE-2016-10146: Captions and labels were handled incorrectly, causing a memory leak that could have lead to DoS (bsc#1020443)\n- CVE-2017-5506: Missing offset check leading to a double-free (bsc#1020436).\n- CVE-2017-5507: Fixed a memory leak when reading MPC files allowing for DoS (bsc#1020439).\n- CVE-2017-5508: Increase the amount of memory allocated for TIFF pixels to prevent a heap buffer-overflow (bsc#1020441).\n- CVE-2017-5511: A missing cast when reading PSD files could have caused memory corruption by a heap overflow (bsc#1020448)\n\nThis update removes the fix for CVE-2016-9773. ImageMagick-6 was not affected by CVE-2016-9773 and it caused a regression (at least in GraphicsMagick) (bsc#1017421).\n","status":"published","published":"2017-03-01T15:51:34Z","modified":"2026-02-04T02:21:35.708368Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1599-1","title":"Security update for ImageMagick","description":"\nThis update for ImageMagick fixes the following issues:\n\nThis security issue was fixed:\n\n- CVE-2017-7941: The ReadSGIImage function in sgi.c allowed remote attackers to consume an\n  amount of available memory via a crafted file (bsc#1034876).\n- CVE-2017-8351: ImageMagick, GraphicsMagick: denial of service (memory leak) via a crafted\n  file (ReadPCDImage func in pcd.c) (bsc#1036986).\n- CVE-2017-8352: denial of service (memory leak) via a crafted file (ReadXWDImage func in\n  xwd.c) (bsc#1036987)\n- CVE-2017-8349: denial of service (memory leak) via a crafted file (ReadSFWImage func in\n  sfw.c) (bsc#1036984)\n- CVE-2017-8350: denial of service (memory leak) via a crafted file (ReadJNGImage function in\n  png.c) (bsc#1036985)\n- CVE-2017-8345: denial of service (memory leak) via a crafted file (ReadMNGImage func in\n  png.c) (bsc#1036980)\n- CVE-2017-8346: denial of service (memory leak) via a crafted file (ReadDCMImage func in\n  dcm.c) (bsc#1036981)\n- CVE-2017-8353: denial of service (memory leak) via a crafted file (ReadPICTImage func in\n  pict.c) (bsc#1036988)\n- CVE-2017-8830: denial of service (memory leak) via a crafted file (ReadBMPImage func in\n  bmp.c:1379) (bsc#1038000)\n- CVE-2017-7606: denial of service (application crash) or possibly have unspecified other\n  impact via a crafted image (bsc#1033091)\n- CVE-2017-8765: memory leak vulnerability via a crafted ICON file (ReadICONImage in\n  coders\\icon.c) (bsc#1037527)\n- CVE-2017-8355: denial of service (memory leak) via a crafted file (ReadMTVImage func in\n  mtv.c) (bsc#1036990)\n- CVE-2017-8344: denial of service (memory leak) via a crafted file (ReadPCXImage func in\n  pcx.c) (bsc#1036978)\n- CVE-2017-9098: uninitialized memory usage in the  ReadRLEImage RLE decoder \n  function coders/rle.c (bsc#1040025)\n- CVE-2017-9141: Missing checks in the ReadDDSImage function in\n  coders/dds.c could lead to a denial of service (assertion) (bsc#1040303)\n- CVE-2017-9142: Missing checks in theReadOneJNGImage function in\n  coders/png.c could lead to denial of service (assertion) (bsc#1040304)\n- CVE-2017-9143: A possible denial of service attack via crafted .art\n  file in ReadARTImage function in coders/art.c (bsc#1040306)\n- CVE-2017-9144: A crafted RLE image can trigger a crash in coders/rle.c\n  could lead to a denial of service (crash) (bsc#1040332)\n\n","status":"published","published":"2017-06-19T06:54:23Z","modified":"2025-05-02T04:04:17.031053Z","updated_at":"2026-11-02T15:53:43.83457Z"}]}}