Skip to content
OpenAdvisories
Unscored CVE-2016-10070 EUVD-2016-1264GHSA-6289-pgqj-g67g

Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a deni…

Published Mar 3, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Package: imagemagick Package: imagemagick Ecosystem: Debian Ecosystem: Ubuntu

Description

Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 imagemagick 8:6.9.6.2+dfsg-2 —
Debian 13 imagemagick 8:6.9.6.2+dfsg-2 —
Debian 12 imagemagick 8:6.9.6.2+dfsg-2 —
Debian 8 imagemagick 8:6.8.9.9-5+deb8u6 DSA-3726-1
Debian 7 imagemagick 8:6.7.7.10-5+deb7u10 DLA-756-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS imagemagick 8:6.8.9.9-7ubuntu5.3 —
Ubuntu 14.04 LTS imagemagick 8:6.7.7.10-6ubuntu3.3 —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP2 ImageMagick 6.8.8.1-59.1 SUSE-SU-2017:0529-1
SLES 12 SP1 ImageMagick 6.8.8.1-59.1 SUSE-SU-2017:0529-1
SLES 11 SP4 GraphicsMagick 1.2.5-4.62.1 SUSE-SU-2017:0518-1
SLES 11 SP4 ImageMagick 6.4.3.6-7.65.1 SUSE-SU-2017:0586-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SUSE Studio Onsite 1.3 GraphicsMagick 1.2.5-4.62.1 SUSE-SU-2017:0518-1
SLES for SAP 12 SP2 ImageMagick 6.8.8.1-59.1 SUSE-SU-2017:0529-1
SLES for SAP 12 SP1 ImageMagick 6.8.8.1-59.1 SUSE-SU-2017:0529-1
SLES for SAP 11 SP4 ImageMagick 6.4.3.6-7.65.1 SUSE-SU-2017:0586-1

Advisories 5

References