The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability can be triggered through any user controlled TIFF that is handled by this functionality.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Mar 2, 2017 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp2 | — | — | Dec 4, 2019 | Dec 23, 2016 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 16, 2020 | Dec 23, 2016 |
| Oracle Solaris | — | Upgrade image/imagemagick to version 6.9.7.4-0.175.3.18.0.1.0 on Solaris 11.3 | May 29, 2017 | Dec 23, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 3, 2016 |
| Suse | — | Upgrade libMagick++1Upgrade ImageMagick-develUpgrade libMagick++-develUpgrade libMagickWand-6_Q16-1Upgrade libMagickCore-6_Q16-1Upgrade libMagickWand1Upgrade ImageMagickUpgrade libMagickWand1-32bitUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickCore1Upgrade perl-PerlMagickUpgrade libMagickCore1-32bitUpgrade libMagick++-6_Q16-3 | Dec 23, 2016 | Dec 23, 2016 |
| Ubuntu | — | Upgrade libmagick++4Upgrade imagemagickUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5Upgrade libmagickcore5-extraUpgrade libmagick++5Upgrade libmagickcore4-extraUpgrade libmagickcore4 | Mar 9, 2017 | Dec 23, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub