CVE-2016-7530

NVD

https://nvd.nist.gov/vuln/detail/CVE-2016-7530

Severity

6.5

Medium

CVSS V3

Eliminate CVEs with Chainguard hardened images

Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.

Start for free

Description

The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds write) via a crafted file.

References

https://nvd.nist.gov/vuln/detail/CVE-2016-7530
https://github.com/advisories/GHSA-533c-x5gf-vr3r
http://www.openwall.com/lists/oss-security/2016/09/22/2
http://www.securityfocus.com/bid/93131
https://bugs.launchpad.net/bugs/1539053
https://bugs.launchpad.net/bugs/1539067
https://bugzilla.redhat.com/show_bug.cgi?id=1378762
https://github.com/ImageMagick/ImageMagick/issues/105
https://github.com/ImageMagick/ImageMagick/issues/110
https://github.com/ImageMagick/ImageMagick/commit/63346f34f9d19179599b5b256e5e8d3dda46435c
https://github.com/ImageMagick/ImageMagick/commit/b5ed738f8060266bf4ae521f7e3ed145aa4498a3
https://github.com/ImageMagick/ImageMagick/commit/c4e63ad30bc42da691f2b5f82a24516dd6b4dc70

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CVE-2016-7530

Severity

Description

References

Affected packages

The trusted source for open source

Product

Solutions

Customers

Resources

Company