The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large "length" field in the header but does not contain sufficient backing data, is provided, the loop over "length" would consume huge CPU resources, since there is no EOF check inside the loop.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Feb 25, 2019 | Sep 7, 2017 |
| Gentoo Linux | — | Upgrade media-gfx/imagemagick. | Nov 13, 2017 | Sep 7, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 7, 2017 |
| Suse | — | Upgrade libMagickWand-6_Q16-1Upgrade GraphicsMagickUpgrade libMagickCore-6_Q16-1Upgrade libMagick++1Upgrade perl-PerlMagickUpgrade ImageMagick-config-6-upstreamUpgrade libMagickCore1-32bitUpgrade libGraphicsMagick2Upgrade libMagickWand1-32bitUpgrade libMagick++-6_Q16-3Upgrade ImageMagickUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-develUpgrade libMagickCore1Upgrade ImageMagick-config-6-SUSEUpgrade libMagickWand1Upgrade perl-GraphicsMagickUpgrade ImageMagick-devel | Jan 4, 2018 | Sep 7, 2017 |
| Ubuntu | — | Upgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-3-extraUpgrade libmagick++5Upgrade libmagickcore-6.q16-2Upgrade imagemagickUpgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5Upgrade libmagick++-6.q16-7Upgrade libmagickcore5Upgrade imagemagick-6.q16Upgrade libmagickcore-6.q16-2-extra | Jun 19, 2018 | Sep 7, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub