magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a crafted file.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
}
],
"source": "CPE_STRING"
}
]
}{
"cpe": "cpe:2.3:a:imagemagick:imagemagick:7.0.3-2:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "7.0.3-2"
},
{
"last_affected": "7.0.3-2"
}
],
"source": [
"CPE_STRING",
"REFERENCES"
]
}[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"107807159509500034816647423314642211700",
"68858660467834400425474470351640526495",
"187865239751367899072392723382070485475",
"299782843773815210996105039440844061836"
]
},
"target": {
"file": "MagickCore/attribute.c"
},
"id": "CVE-2016-7906-1d3145df",
"signature_version": "v1",
"signature_type": "Line",
"source": "https://github.com/imagemagick/imagemagick/commit/90406972f108c4da71f998601b06abdc2ac6f06e",
"deprecated": false
},
{
"digest": {
"function_hash": "92243971982347717171807797241448899910",
"length": 4289.0
},
"target": {
"function": "SetImageType",
"file": "MagickCore/attribute.c"
},
"id": "CVE-2016-7906-cb32bd4a",
"signature_version": "v1",
"signature_type": "Function",
"source": "https://github.com/imagemagick/imagemagick/commit/90406972f108c4da71f998601b06abdc2ac6f06e",
"deprecated": false
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7906.json"
"2026-07-08T10:53:43Z"