Description
Buffer overflow in MagickCore/enhance.c in ImageMagick before 7.0.2-7 allows remote attackers to have unspecified impact via vectors related to pixel cache morphology.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | ImageMagick | 6.8.8.1-33.1 | SUSE-SU-2016:2076-1 |
| SLES 11 SP4 | ImageMagick | 6.4.3.6-7.48.1 | SUSE-SU-2016:2075-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP1 | ImageMagick | 6.8.8.1-33.1 | SUSE-SU-2016:2076-1 |
| SLES for SAP 11 SP4 | ImageMagick | 6.4.3.6-7.48.1 | SUSE-SU-2016:2075-1 |
Advisories 2
- SUSE-SU-2016:2076-1 Security update for ImageMagick SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2016:2075-1 Security update for ImageMagick SUSE / openSUSE Security Updates · Feb 4, 2026
References
- 1036502 vdb-entry
- [oss-security] 20160802 CVE Request ImageMagick buffer overflow mailing-list
- http://www.imagemagick.org/script/changelog.php
- [oss-security] 20160802 Re: CVE Request ImageMagick buffer overflow mailing-list
- https://github.com/ImageMagick/ImageMagick/commit/76401e172ea3a55182be2b8e2aca4d07270f6da6