{"id":"CVE-2016-8866","aliases":["DLA-756-1","EUVD-2016-9691","GHSA-v56x-jxjp-g3fg","MGASA-2018-0229","SUSE-SU-2016:3256-1","SUSE-SU-2016:3258-1","SUSE-SU-2017:0305-1","UBUNTU-CVE-2016-8866"],"status":"published","title":"The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8...","description":"The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.048,"percentile":0.92006,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2016-12-21T00:00:00Z","modified":"2026-10-24T10:47:26Z","affected":[{"source":"osv","ecosystem":"Debian:7","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.7.7.10-5+deb7u10"}]}],"versions":["8:6.7.7.10-5","8:6.7.7.10-5+deb7u2","8:6.7.7.10-5+deb7u3","8:6.7.7.10-5+deb7u4","8:6.7.7.10-5+deb7u5","8:6.7.7.10-5+deb7u6","8:6.7.7.10-5+deb7u7","8:6.7.7.10-5+deb7u8","8:6.7.7.10-5+deb7u9"],"bundled":19},{"source":"osv","ecosystem":"Mageia:6","package":"converseen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6.2-1.3.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"cuneiform-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-9.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"dvdauthor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.2-2.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.5-8.3.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.9.41-1.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.92.1-2.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"k3d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0.5-5.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"kxstitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-2.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"libopenshot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.8-1.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"ocaml-glmlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.03.51-17.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"perl-Image-SubImageFind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.0-6.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"pfstools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-3.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"php-imagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-6.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"php-magickwand","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9.2-10.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"psiconv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-26.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"pythonmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12-7.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"ruby-rmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.4-12.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"synfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-2.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"vdr-plugin-skinelchi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-8.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"vdr-plugin-skinenigmang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-10.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.60.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.60.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.60.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.59.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-4.59.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7","8:6.7.7.10-6ubuntu3.13+esm8","8:6.7.7.10-6ubuntu3.13+esm9","8:6.7.7.10-6ubuntu3.13+esm10","8:6.7.7.10-6ubuntu3.13+esm11","8:6.7.7.10-6ubuntu3.13+esm12","8:6.7.7.10-6ubuntu3.13+esm13","8:6.7.7.10-6ubuntu3.13+esm14","8:6.7.7.10-6ubuntu3.13+esm15","8:6.7.7.10-6ubuntu3.13+esm16","8:6.7.7.10-6ubuntu3.13+esm17","8:6.7.7.10-6ubuntu3.13+esm18","8:6.7.7.10-6ubuntu3.13+esm19","8:6.7.7.10-6ubuntu3.13+esm20","8:6.7.7.10-6ubuntu3.13+esm21","8:6.7.7.10-6ubuntu3.13+esm22","8:6.7.7.10-6ubuntu3.13+esm23","8:6.7.7.10-6ubuntu3.13+esm24","8:6.7.7.10-6ubuntu3.13+esm25","8:6.7.7.10-6ubuntu3.13+esm26","8:6.7.7.10-6ubuntu3.13+esm27"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1","8:6.8.9.9-7ubuntu5.16+esm2","8:6.8.9.9-7ubuntu5.16+esm3","8:6.8.9.9-7ubuntu5.16+esm4","8:6.8.9.9-7ubuntu5.16+esm5","8:6.8.9.9-7ubuntu5.16+esm6","8:6.8.9.9-7ubuntu5.16+esm7","8:6.8.9.9-7ubuntu5.16+esm8","8:6.8.9.9-7ubuntu5.16+esm9","8:6.8.9.9-7ubuntu5.16+esm10","8:6.8.9.9-7ubuntu5.16+esm11","8:6.8.9.9-7ubuntu5.16+esm12","8:6.8.9.9-7ubuntu5.16+esm13","8:6.8.9.9-7ubuntu5.16+esm14","8:6.8.9.9-7ubuntu5.16+esm15","8:6.8.9.9-7ubuntu5.16+esm16","8:6.8.9.9-7ubuntu5.16+esm17","8:6.8.9.9-7ubuntu5.16+esm18","8:6.8.9.9-7ubuntu5.16+esm19","8:6.8.9.9-7ubuntu5.16+esm20","8:6.8.9.9-7ubuntu5.16+esm21","8:6.8.9.9-7ubuntu5.16+esm22","8:6.8.9.9-7ubuntu5.16+esm23","8:6.8.9.9-7ubuntu5.16+esm24","8:6.8.9.9-7ubuntu5.16+esm25","8:6.8.9.9-7ubuntu5.16+esm26"]}],"products":[{"vendor":"imagemagick","product":"imagemagick"},{"vendor":"opensuse","product":"leap"},{"vendor":"opensuse","product":"opensuse"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/10/21/5","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1388816","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","VDB Entry","fix"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-12/msg00141.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00006.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/10/20/3","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://blogs.gentoo.org/ago/2016/10/20/imagemagick-memory-allocation-failure-in-acquiremagickmemory-memory-c-incomplete-fix-for-cve-2016-8862/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","report"]},{"url":"https://github.com/ImageMagick/ImageMagick/issues/271","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00085.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8866"},{"url":"https://blogs.gentoo.org/ago/2016/10/20/imagemagick-memory-allocation-failure-in-acquiremagickmemory-memory-c-incomplete-fix-for-cve-2016-8862"},{"url":"https://github.com/advisories/GHSA-v56x-jxjp-g3fg"},{"url":"https://advisories.mageia.org/MGASA-2018-0229.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19078","tags":["report"]},{"url":"http://git.imagemagick.org/repos/ImageMagick/blob/ImageMagick-6/ChangeLog","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163256-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1009318","tags":["report"]},{"url":"https://bugzilla.suse.com/1011130","tags":["report"]},{"url":"https://bugzilla.suse.com/1011136","tags":["report"]},{"url":"https://bugzilla.suse.com/1013376","tags":["report"]},{"url":"https://bugzilla.suse.com/1014159","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9773","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163258-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9848","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170305-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1013640","tags":["report"]},{"url":"https://bugzilla.suse.com/1017421","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9830","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-8866","tags":["report"]},{"url":"https://www.imagemagick.org/discourse-server/viewtopic.php?f=3\u0026t=30908#p140255","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8866","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-8866","description":"The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862.","status":"published","published":"2017-02-15T19:00:00Z","modified":"2024-08-06T02:35:01.227Z","updated_at":"2026-11-02T14:33:32.415289Z"}],"euvd":[{"id":"EUVD-2016-9691","description":"The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862.","status":"published","published":"2017-02-15T19:00:00Z","modified":"2024-08-06T02:35:01Z","updated_at":"2026-11-03T02:22:29.188942Z"}],"ghsa":[{"id":"GHSA-v56x-jxjp-g3fg","title":"The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8...","description":"The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862.","status":"published","published":"2022-05-13T01:10:27Z","modified":"2025-04-20T03:33:58Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:41.326693Z"}],"nvd":[{"id":"CVE-2016-8866","description":"The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862.","status":"published","published":"2017-02-15T19:59:01.017Z","modified":"2026-06-17T00:55:06.243Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:35.822579Z"}],"osv":[{"id":"CVE-2016-8866","description":"The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862.","status":"published","published":"2017-02-15T19:59:01.017Z","modified":"2026-10-24T10:47:26.780282484Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:03.171316Z"},{"id":"UBUNTU-CVE-2016-8866","description":"The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862.","status":"published","published":"2017-02-15T19:59:00Z","modified":"2026-10-01T00:18:19.523002533Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:12.994319Z"},{"id":"DLA-756-1","title":"imagemagick - security update","status":"published","published":"2016-12-21T00:00:00Z","modified":"2026-03-09T02:10:26.108873Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"MGASA-2018-0229","title":"Updated imagemagick packages fix security vulnerabilities","description":"The imagemagick package has been updated to version 6.9.9.41 which\nfixes several unspecified security vulnerabilities.\nThis update fixes several vulnerabilities in imagemagick, including:\nVarious memory handling problems and cases of missing or incomplete\ninput sanitising may result in denial of service, memory disclosure\nor the execution of arbitrary code if malformed GIF, TTF, SVG, TIFF,\nPCX, JPG or SFW files are processed.\n\nSeveral packages have been rebuilt for the updated ImageMagick.\n","status":"published","published":"2018-05-12T06:28:12Z","modified":"2026-04-16T06:25:36.607120995Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2016:3256-1","title":"Security update for ImageMagick","description":"\nThis update for ImageMagick fixes the following issues:\n\n* CVE-2016-9556: Possible Heap-overflow found by fuzzing [bsc#1011130]\n* CVE-2016-9559: Possible Null pointer access found by fuzzing [bsc#1011136]\n* CVE-2016-8707: Possible code execution in the tiff deflate convert code [bsc#1014159]\n* CVE-2016-9773: Possible Heap overflow in IsPixelGray [bsc#1013376]\n* CVE-2016-8866: Possible memory allocation failure in AcquireMagickMemory [bsc#1009318]\n","status":"published","published":"2016-12-23T11:22:13Z","modified":"2026-02-04T03:46:31.602091Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2016:3258-1","title":"Security update for ImageMagick","description":"\nThis update for ImageMagick fixes the following issues:\n\n  * CVE-2016-9556 Possible Heap-overflow found by fuzzing [bsc#1011130]\n  * CVE-2016-9559 Possible Null pointer access found by fuzzing [bsc#1011136]\n  * CVE-2016-8707 Possible code execution in Tiff conver utility [bsc#1014159]\n  * CVE-2016-8866 Memory allocation failure in AcquireMagickMemory could lead to Heap overflow [bsc#1009318]\n  * CVE-2016-9559 Possible Null pointer access found by fuzzing [bsc#1011136]\n\n","status":"published","published":"2016-12-23T11:26:16Z","modified":"2026-02-04T02:19:56.616362Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:0305-1","title":"Security update for GraphicsMagick","description":"\nThis update for GraphicsMagick fixes the following issues:\n\n* CVE-2016-9556 Possible Heap-overflow found by fuzzing [bsc#1011130]\n* CVE-2016-9559 Possible Null pointer access found by fuzzing [bsc#1011136]\n* CVE-2016-8866 Possible memory allocation failure in AcquireMagickMemory [bsc#1009318]\n* CVE-2016-9830: Memory allocation failure in MagickRealloc (memory.c) (bsc#1013640).\n","status":"published","published":"2017-01-27T17:25:07Z","modified":"2026-02-04T03:57:29.873571Z","updated_at":"2026-11-02T15:53:43.83457Z"}]}}