DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Advisories 3

• USN-3131-1 imagemagick vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026
• DLA-960-1 imagemagick - security update Debian Security (DSA / DLA) · Mar 9, 2026
• DLA-242-1 imagemagick - security update Debian Security (DSA / DLA) · Mar 9, 2026

References

• 70837 vdb-entry
• https://int21.de/cve/CVE-2014-8562-ImageMagick-dcm-oob-heap-overflow.html
• https://packetstormsecurity.com/files/128944/ImageMagick-Out-Of-Bounds-Read-Heap-Overflow.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1159362