Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Jul 30, 2024 | May 2, 2005 |
| Freebsd | — | Upgrade ImageMagickUpgrade ImageMagick-nox11 | Dec 10, 2025 | Jan 18, 2005 |
| Gentoo Linux | — | Upgrade media-gfx/graphicsmagick.Upgrade media-gfx/imagemagick. | Oct 30, 2017 | May 2, 2005 |
| Suse | — | Upgrade perl-PerlMagick | Feb 17, 2015 | May 2, 2005 |
| Ubuntu | — | Upgrade imagemagick | Nov 8, 2024 | May 2, 2005 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub