In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Dec 14, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 14, 2017 |
| Suse | — | Upgrade libMagickCore-6_Q16-1-32bitUpgrade libMagick++-develUpgrade libMagickWand-6_Q16-1Upgrade ImageMagick-config-6-upstreamUpgrade ImageMagickUpgrade perl-PerlMagickUpgrade ImageMagick-config-6-SUSEUpgrade libMagickCore-6_Q16-1Upgrade ImageMagick-develUpgrade libMagick++-6_Q16-3 | Feb 4, 2018 | Dec 14, 2017 |
| Ubuntu | — | Upgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade imagemagick-6.q16Upgrade libmagick++5Upgrade libmagick++-6.q16-7Upgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5-extraUpgrade libmagickcore-6.q16-3Upgrade libmagickcore5Upgrade libmagickcore-6.q16-3-extraUpgrade libmagick++-6.q16-5v5 | Jun 19, 2018 | Dec 14, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub