In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service (ReadPSDImage memory exhaustion) via a crafted file.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Sep 8, 2020 | Aug 22, 2017 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Nov 13, 2017 | Aug 22, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 4, 2017 |
| Suse | — | Upgrade libMagickWand-6_Q16-1Upgrade GraphicsMagickUpgrade perl-PerlMagickUpgrade libGraphicsMagick2Upgrade libMagickCore1Upgrade libMagickCore-6_Q16-1-32bitUpgrade ImageMagick-develUpgrade libMagick++-develUpgrade perl-GraphicsMagickUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagickUpgrade libMagick++1Upgrade libMagickCore1-32bitUpgrade ImageMagick-config-6-upstreamUpgrade libMagickWand1Upgrade libMagickWand1-32bitUpgrade libMagick++-6_Q16-3Upgrade libMagickCore-6_Q16-1 | Jan 4, 2018 | Aug 22, 2017 |
| Ubuntu | — | Upgrade imagemagick-6.q16Upgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade libmagickcore5-extraUpgrade libmagick++-6.q16-5v5Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore-6.q16-3Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore5Upgrade libmagick++5Upgrade libmagick++-6.q16-7 | Jun 19, 2018 | Aug 22, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub