{"id":"CVE-2016-9773","aliases":["EUVD-2016-10574","GHSA-97pw-p5qg-c64q","MGASA-2018-0229","SUSE-SU-2016:3256-1","SUSE-SU-2016:3258-1"],"status":"published","title":"Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in...","description":"Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01832,"percentile":0.79029,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-125"],"published":"2016-12-23T11:22:13Z","modified":"2026-10-24T10:30:24Z","affected":[{"source":"osv","ecosystem":"Mageia:6","package":"converseen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6.2-1.3.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"cuneiform-linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.0-9.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"dvdauthor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.2-2.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"emacs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"24.5-8.3.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.9.41-1.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"inkscape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.92.1-2.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"k3d","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0.5-5.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"kxstitch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-2.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"libopenshot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.8-1.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"ocaml-glmlite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.03.51-17.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"perl-Image-SubImageFind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.30.0-6.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"pfstools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.6-3.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"php-imagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1-6.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"php-magickwand","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.9.2-10.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"psiconv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8-26.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"pythonmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.12-7.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"ruby-rmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.15.4-12.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"synfig","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.1-2.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"vdr-plugin-skinelchi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.8-8.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"Mageia:6","package":"vdr-plugin-skinenigmang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-10.2.mga6"}]}],"bundled":104},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.60.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.60.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-7.60.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-54.1"}]}],"bundled":6}],"products":[{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://blogs.gentoo.org/ago/2016/12/01/imagemagick-heap-based-buffer-overflow-in-ispixelgray-pixel-accessor-h-incomplete-fix-for-cve-2016-9556/","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","VDB Entry","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2016/12/02/12","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/12/01/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2016/12/02/11","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-9773"},{"url":"https://blogs.gentoo.org/ago/2016/12/01/imagemagick-heap-based-buffer-overflow-in-ispixelgray-pixel-accessor-h-incomplete-fix-for-cve-2016-9556"},{"url":"https://github.com/advisories/GHSA-97pw-p5qg-c64q"},{"url":"https://advisories.mageia.org/MGASA-2018-0229.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19078","tags":["report"]},{"url":"http://git.imagemagick.org/repos/ImageMagick/blob/ImageMagick-6/ChangeLog","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163256-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1009318","tags":["report"]},{"url":"https://bugzilla.suse.com/1011130","tags":["report"]},{"url":"https://bugzilla.suse.com/1011136","tags":["report"]},{"url":"https://bugzilla.suse.com/1013376","tags":["report"]},{"url":"https://bugzilla.suse.com/1014159","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8707","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9556","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9773","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20163258-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9848","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-9773","description":"Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.","status":"published","published":"2017-02-16T18:00:00Z","modified":"2024-08-06T02:59:03.401Z","updated_at":"2026-11-02T14:33:32.415289Z"}],"euvd":[{"id":"EUVD-2016-10574","description":"Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.","status":"published","published":"2017-02-16T18:00:00Z","modified":"2024-08-06T02:59:03Z","updated_at":"2026-11-03T02:22:26.376959Z"}],"ghsa":[{"id":"GHSA-97pw-p5qg-c64q","title":"Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in...","description":"Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.","status":"published","published":"2022-05-17T02:58:00Z","modified":"2025-04-20T03:33:00Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:40.176288Z"}],"nvd":[{"id":"CVE-2016-9773","description":"Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.","status":"published","published":"2017-02-17T02:59:14.013Z","modified":"2026-06-17T00:56:32.18Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119","CWE-125"],"updated_at":"2026-11-02T14:03:35.822579Z"}],"osv":[{"id":"CVE-2016-9773","description":"Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.","status":"published","published":"2017-02-17T02:59:14.013Z","modified":"2026-10-24T10:30:24.748334881Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:03.472693Z"},{"id":"MGASA-2018-0229","title":"Updated imagemagick packages fix security vulnerabilities","description":"The imagemagick package has been updated to version 6.9.9.41 which\nfixes several unspecified security vulnerabilities.\nThis update fixes several vulnerabilities in imagemagick, including:\nVarious memory handling problems and cases of missing or incomplete\ninput sanitising may result in denial of service, memory disclosure\nor the execution of arbitrary code if malformed GIF, TTF, SVG, TIFF,\nPCX, JPG or SFW files are processed.\n\nSeveral packages have been rebuilt for the updated ImageMagick.\n","status":"published","published":"2018-05-12T06:28:12Z","modified":"2026-04-16T06:25:36.607120995Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2016:3256-1","title":"Security update for ImageMagick","description":"\nThis update for ImageMagick fixes the following issues:\n\n* CVE-2016-9556: Possible Heap-overflow found by fuzzing [bsc#1011130]\n* CVE-2016-9559: Possible Null pointer access found by fuzzing [bsc#1011136]\n* CVE-2016-8707: Possible code execution in the tiff deflate convert code [bsc#1014159]\n* CVE-2016-9773: Possible Heap overflow in IsPixelGray [bsc#1013376]\n* CVE-2016-8866: Possible memory allocation failure in AcquireMagickMemory [bsc#1009318]\n","status":"published","published":"2016-12-23T11:22:13Z","modified":"2026-02-04T03:46:31.602091Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2016:3258-1","title":"Security update for ImageMagick","description":"\nThis update for ImageMagick fixes the following issues:\n\n  * CVE-2016-9556 Possible Heap-overflow found by fuzzing [bsc#1011130]\n  * CVE-2016-9559 Possible Null pointer access found by fuzzing [bsc#1011136]\n  * CVE-2016-8707 Possible code execution in Tiff conver utility [bsc#1014159]\n  * CVE-2016-8866 Memory allocation failure in AcquireMagickMemory could lead to Heap overflow [bsc#1009318]\n  * CVE-2016-9559 Possible Null pointer access found by fuzzing [bsc#1011136]\n\n","status":"published","published":"2016-12-23T11:26:16Z","modified":"2026-02-04T02:19:56.616362Z","updated_at":"2026-11-02T15:53:43.83457Z"}]}}