CVE-2016-8707: debian debian_linux Out-of-bounds Write
Vulnerability summary
CVE-2016-8707 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in debian debian_linux. EPSS estimates a 3.78% chance of exploitation in the next 30 days, higher than 89.8% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 6 · Related 3Timeline
- 23-12-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability can be triggered through any user controlled TIFF that is handled by this functionality.
CVSS metrics
7 scores · 4 sources · 3 versions- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- NVDNIST7.5HighCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.0HighCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
3.78%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
+0.13 pp
From 3.65% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (talosintelligence.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian2 products
- imagemagick< 8:6.9.7.0+dfsg-2
- debian_linuxEOL8.0
Imagemagick1 product
- imagemagick7.0.3-1
Ubuntu1 product
- imagemagick< 8:6.7.7.10-6ubuntu3.5 | < 8:6.8.9.9-7ubuntu5.5
3 vendors · 4 products
References
7 links
- www.talosintelligence.com/reports/TALOS-2016-0216/X Refsource MISCExploitTechnical DescriptionThird Party AdvisoryREPORT