In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade imagemagick | Aug 19, 2020 | Dec 14, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 14, 2017 |
| Suse | — | Upgrade libMagick++-6_Q16-3Upgrade ImageMagick-develUpgrade libMagickCore-6_Q16-1Upgrade libMagick++-develUpgrade libMagickCore-6_Q16-1-32bitUpgrade libMagickWand-6_Q16-1Upgrade ImageMagickUpgrade ImageMagick-config-6-SUSEUpgrade ImageMagick-config-6-upstreamUpgrade perl-PerlMagick | Feb 4, 2018 | Dec 14, 2017 |
| Ubuntu | — | Upgrade libmagick++5Upgrade libmagick++-6.q16-7Upgrade imagemagick-6.q16Upgrade imagemagickUpgrade libmagickcore-6.q16-2Upgrade libmagickcore-6.q16-3-extraUpgrade libmagickcore-6.q16-2-extraUpgrade libmagickcore5-extraUpgrade libmagickcore5Upgrade libmagickcore-6.q16-3Upgrade libmagick++-6.q16-5v5 | Jun 19, 2018 | Dec 14, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub