CVE-2016-7527
- Source
- https://cve.org/CVERecord?id=CVE-2016-7527
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7527.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2016-7527
- Downstream
- Related
- Published
- 2017-04-20T18:59:01.217Z
- Modified
- 2026-02-07T22:02:55.627842Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.
- References
-
- http://www.openwall.com/lists/oss-security/2016/09/22/2
- http://www.securityfocus.com/bid/93220
- https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1542115
- https://bugzilla.redhat.com/show_bug.cgi?id=1378759
- https://github.com/ImageMagick/ImageMagick/commit/b3dd69b23e9338806891c708a0cc8a82c0d1872a
- https://github.com/ImageMagick/ImageMagick/issues/122
- https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1542115
- https://bugzilla.redhat.com/show_bug.cgi?id=1378759
- https://github.com/ImageMagick/ImageMagick/issues/122
- http://www.openwall.com/lists/oss-security/2016/09/22/2
- https://bugzilla.redhat.com/show_bug.cgi?id=1378759
- https://github.com/ImageMagick/ImageMagick/commit/a251039393f423c7858e63cab6aa98d17b8b7a41
- https://github.com/ImageMagick/ImageMagick/commit/b3dd69b23e9338806891c708a0cc8a82c0d1872a
- https://github.com/ImageMagick/ImageMagick/issues/122
- http://www.openwall.com/lists/oss-security/2016/09/22/2
Affected packages
Git / github.com/imagemagick/imagemagick
Affected ranges
- Type
- GIT
- Repo
- https://github.com/imagemagick/imagemagick
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
Database specific
vanir_signatures
[
{
"deprecated": false,
"source": "https://github.com/imagemagick/imagemagick/commit/b3dd69b23e9338806891c708a0cc8a82c0d1872a",
"id": "CVE-2016-7527-2add7a23",
"target": {
"file": "coders/wpg.c"
},
"digest": {
"line_hashes": [
"48214060722575175900652905103115784263",
"192544690992468651095408255553005328360",
"188866780971680379773126095473106729098",
"174241936611983018526554649610574483995"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
},
{
"deprecated": false,
"source": "https://github.com/imagemagick/imagemagick/commit/a251039393f423c7858e63cab6aa98d17b8b7a41",
"id": "CVE-2016-7527-7048e1c6",
"target": {
"file": "coders/wpg.c"
},
"digest": {
"line_hashes": [
"308413402420599373841370050371394476103",
"267939978421508097091257626400552722500",
"251398007976745976914884131858725110193",
"68647553226995814576600189962483951573"
],
"threshold": 0.9
},
"signature_type": "Line",
"signature_version": "v1"
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7527.json"