CVE-2016-7514
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2016-7514
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-7514.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2016-7514
- Downstream
- Related
- Published
- 2017-04-20T18:59:00.873Z
- Modified
- 2025-11-14T03:34:10.720629Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file.
- References
-
- http://www.openwall.com/lists/oss-security/2016/09/22/2
- http://www.securityfocus.com/bid/93122
- https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1533442
- https://bugzilla.redhat.com/show_bug.cgi?id=1378739
- https://github.com/ImageMagick/ImageMagick/issues/83
- https://github.com/ImageMagick/ImageMagick/commit/198fffab4daf8aea88badd9c629350e5b26ec32f
- https://github.com/ImageMagick/ImageMagick/commit/280215b9936d145dd5ee91403738ccce1333cab1
- https://github.com/ImageMagick/ImageMagick/commit/6f1879d498bcc5cce12fe0c5decb8dbc0f608e5d
- https://github.com/ImageMagick/ImageMagick/commit/e14fd0a2801f73bdc123baf4fbab97dec55919eb
Affected packages
Git / github.com/imagemagick/imagemagick
Affected ranges
- Type
- GIT
- Repo
- https://github.com/imagemagick/imagemagick
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixedFixedFixed
Database specific
vanir_signatures
[
{
"digest": {
"length": 3404.0,
"function_hash": "285074460042033435714570774745871577974"
},
"target": {
"file": "coders/psd.c",
"function": "WriteImageChannels"
},
"deprecated": false,
"id": "CVE-2016-7514-03bfd714",
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/imagemagick/imagemagick/commit/6f1879d498bcc5cce12fe0c5decb8dbc0f608e5d"
},
{
"digest": {
"line_hashes": [
"109751460950315633864691469035376248211",
"178912501136852134042602593953454749296",
"134730300755715259333632594253742267699",
"285867157739302346549685853921776613191"
],
"threshold": 0.9
},
"target": {
"file": "coders/psd.c"
},
"deprecated": false,
"id": "CVE-2016-7514-45b70d5f",
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/imagemagick/imagemagick/commit/e14fd0a2801f73bdc123baf4fbab97dec55919eb"
},
{
"digest": {
"length": 2238.0,
"function_hash": "169306428911167216219657258921283259532"
},
"target": {
"file": "coders/psd.c",
"function": "ReadPSDChannelPixels"
},
"deprecated": false,
"id": "CVE-2016-7514-d1ecc875",
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/imagemagick/imagemagick/commit/e14fd0a2801f73bdc123baf4fbab97dec55919eb"
},
{
"digest": {
"line_hashes": [
"161624246808178391736060810080783379634",
"97090877004137658579072362989435123192",
"327810344119592760556648814629062316645",
"300446164371847724661278259517095074341",
"183633811458571232582399668000446660690"
],
"threshold": 0.9
},
"target": {
"file": "coders/psd.c"
},
"deprecated": false,
"id": "CVE-2016-7514-ebc47fac",
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/imagemagick/imagemagick/commit/6f1879d498bcc5cce12fe0c5decb8dbc0f608e5d"
}
]