{"schemaVersion":3,"id":"SUSE-SU-2016:2964-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for ImageMagick\n\n\nThis update for ImageMagick fixes the following issues:\n\nThese vulnerabilities could be triggered by processing specially crafted image files,\nwhich could lead to a process crash or resource consumtion, or potentially have\nunspecified futher impact.\n\n- CVE-2016-8862: Memory allocation failure in AcquireMagickMemory (bsc#1007245)\n- CVE-2014-9907: DOS due to corrupted DDS files (bsc#1000714)\n- CVE-2015-8959: DOS due to corrupted DDS files (bsc#1000713)\n- CVE-2016-7537: Out of bound access for corrupted pdb file (bsc#1000711)\n- CVE-2016-6823: BMP Coder Out-Of-Bounds Write Vulnerability (bsc#1001066)\n- CVE-2016-7514: Out-of-bounds read in coders/psd.c (bsc#1000688)\n- CVE-2016-7515: Rle file handling for corrupted file (bsc#1000689)\n- CVE-2016-7529: out of bound in quantum handling (bsc#1000399)\n- CVE-2016-7101: SGI Coder Out-Of-Bounds Read Vulnerability (bsc#1001221)\n- CVE-2016-7527:  out of bound access in wpg file coder: (bsc#1000436)\n- CVE-2016-7996, CVE-2016-7997: WPG Reader Issues (bsc#1003629)\n- CVE-2016-7528: out of bound access in xcf file coder (bsc#1000434)\n- CVE-2016-8683: Check that filesize is reasonable compared to the header value (bsc#1005127)\n- CVE-2016-8682: Stack-buffer read overflow while reading SCT header (bsc#1005125)\n- CVE-2016-8684: Mismatch between real filesize and header values (bsc#1005123)\n- Buffer overflows in SIXEL, PDB, MAP, and TIFF coders (bsc#1002209)\n- CVE-2016-7525: Heap buffer overflow in psd file coder (bsc#1000701)\n- CVE-2016-7524: AddressSanitizer:heap-buffer-overflow READ of size 1 in meta.c:465 (bsc#1000700)\n- CVE-2016-7530: Out of bound in quantum handling (bsc#1000703)\n- CVE-2016-7531: Pbd file out of bound access (bsc#1000704)\n- CVE-2016-7533: Wpg file out of bound for corrupted file (bsc#1000707)\n- CVE-2016-7535: Out of bound access for corrupted psd file (bsc#1000709)\n- CVE-2016-7522: Out of bound access for malformed psd file (bsc#1000698)\n- CVE-2016-7517: out-of-bounds read in coders/pict.c (bsc#1000693)\n- CVE-2016-7516: Out of bounds problem in rle, pict, viff and sun files (bsc#1000692)\n- CVE-2015-8958: Potential DOS in sun file handling due to malformed files (bsc#1000691)\n- CVE-2015-8957: Buffer overflow in sun file handling (bsc#1000690)\n- CVE-2016-7519: out-of-bounds read in coders/rle.c (bsc#1000695)\n- CVE-2016-7518: out-of-bounds read in coders/sun.c (bsc#1000694)\n- CVE-2016-7800: 8BIM/8BIMW unsigned underflow leads to heap overflow (bsc#1002422)\n- CVE-2016-7523: AddressSanitizer:heap-buffer-overflow READ of size 1 meta.c:496 (bsc#1000699)\n- CVE-2016-7799: mogrify global buffer overflow (bsc#1002421)","dates":{"published":"2016-12-01T13:22:05.000Z","modified":"2026-02-04T03:48:30.089Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Server 11 SP4","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Server 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Server 11 SP4","purlType":"rpm","versions":[{"text":"< 6.4.3.6-7.54.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.4.3.6-7.54.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4","purlType":"rpm","versions":[{"text":"< 6.4.3.6-7.54.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.4.3.6-7.54.1","eol":null,"hubHref":null},{"vendor":"suse","product":"ImageMagick&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","name":"ImageMagick","label":"ImageMagick&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/ImageMagick&distro=SUSE Linux Enterprise Software Development Kit 11 SP4","purlType":"rpm","versions":[{"text":"< 6.4.3.6-7.54.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.4.3.6-7.54.1","eol":null,"hubHref":null}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162964-1/","label":"www.suse.com/support/update/announcement/2016/suse-su-20162964-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1000399","label":"bugzilla.suse.com/1000399","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000434","label":"bugzilla.suse.com/1000434","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000436","label":"bugzilla.suse.com/1000436","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000688","label":"bugzilla.suse.com/1000688","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000689","label":"bugzilla.suse.com/1000689","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000690","label":"bugzilla.suse.com/1000690","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000691","label":"bugzilla.suse.com/1000691","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000692","label":"bugzilla.suse.com/1000692","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000693","label":"bugzilla.suse.com/1000693","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000694","label":"bugzilla.suse.com/1000694","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000695","label":"bugzilla.suse.com/1000695","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000698","label":"bugzilla.suse.com/1000698","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000699","label":"bugzilla.suse.com/1000699","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000700","label":"bugzilla.suse.com/1000700","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000701","label":"bugzilla.suse.com/1000701","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000703","label":"bugzilla.suse.com/1000703","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000704","label":"bugzilla.suse.com/1000704","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000707","label":"bugzilla.suse.com/1000707","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000709","label":"bugzilla.suse.com/1000709","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000711","label":"bugzilla.suse.com/1000711","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000713","label":"bugzilla.suse.com/1000713","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1000714","label":"bugzilla.suse.com/1000714","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1001066","label":"bugzilla.suse.com/1001066","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1001221","label":"bugzilla.suse.com/1001221","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1002209","label":"bugzilla.suse.com/1002209","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1002421","label":"bugzilla.suse.com/1002421","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1002422","label":"bugzilla.suse.com/1002422","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1003629","label":"bugzilla.suse.com/1003629","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1005123","label":"bugzilla.suse.com/1005123","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1005125","label":"bugzilla.suse.com/1005125","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1005127","label":"bugzilla.suse.com/1005127","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1007245","label":"bugzilla.suse.com/1007245","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9907","label":"www.suse.com/security/cve/CVE-2014-9907","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8957","label":"www.suse.com/security/cve/CVE-2015-8957","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8958","label":"www.suse.com/security/cve/CVE-2015-8958","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8959","label":"www.suse.com/security/cve/CVE-2015-8959","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5687","label":"www.suse.com/security/cve/CVE-2016-5687","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6823","label":"www.suse.com/security/cve/CVE-2016-6823","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7101","label":"www.suse.com/security/cve/CVE-2016-7101","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7514","label":"www.suse.com/security/cve/CVE-2016-7514","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7515","label":"www.suse.com/security/cve/CVE-2016-7515","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7516","label":"www.suse.com/security/cve/CVE-2016-7516","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7517","label":"www.suse.com/security/cve/CVE-2016-7517","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7518","label":"www.suse.com/security/cve/CVE-2016-7518","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7519","label":"www.suse.com/security/cve/CVE-2016-7519","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7522","label":"www.suse.com/security/cve/CVE-2016-7522","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7523","label":"www.suse.com/security/cve/CVE-2016-7523","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7524","label":"www.suse.com/security/cve/CVE-2016-7524","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7525","label":"www.suse.com/security/cve/CVE-2016-7525","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7526","label":"www.suse.com/security/cve/CVE-2016-7526","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7527","label":"www.suse.com/security/cve/CVE-2016-7527","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7528","label":"www.suse.com/security/cve/CVE-2016-7528","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7529","label":"www.suse.com/security/cve/CVE-2016-7529","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7530","label":"www.suse.com/security/cve/CVE-2016-7530","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7531","label":"www.suse.com/security/cve/CVE-2016-7531","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7533","label":"www.suse.com/security/cve/CVE-2016-7533","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7535","label":"www.suse.com/security/cve/CVE-2016-7535","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7537","label":"www.suse.com/security/cve/CVE-2016-7537","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7799","label":"www.suse.com/security/cve/CVE-2016-7799","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7800","label":"www.suse.com/security/cve/CVE-2016-7800","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7996","label":"www.suse.com/security/cve/CVE-2016-7996","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7997","label":"www.suse.com/security/cve/CVE-2016-7997","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8682","label":"www.suse.com/security/cve/CVE-2016-8682","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8683","label":"www.suse.com/security/cve/CVE-2016-8683","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8684","label":"www.suse.com/security/cve/CVE-2016-8684","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8862","label":"www.suse.com/security/cve/CVE-2016-8862","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2014-9907","CVE-2015-8957","CVE-2015-8958","CVE-2015-8959","CVE-2016-5687","CVE-2016-6823","CVE-2016-7101","CVE-2016-7514","CVE-2016-7515","CVE-2016-7516","CVE-2016-7517","CVE-2016-7518","CVE-2016-7519","CVE-2016-7522","CVE-2016-7523","CVE-2016-7524","CVE-2016-7525","CVE-2016-7526","CVE-2016-7527","CVE-2016-7528","CVE-2016-7529","CVE-2016-7530","CVE-2016-7531","CVE-2016-7533","CVE-2016-7535","CVE-2016-7537","CVE-2016-7799","CVE-2016-7800","CVE-2016-7996","CVE-2016-7997","CVE-2016-8682","CVE-2016-8683","CVE-2016-8684","CVE-2016-8862"],"downstream":[],"duplicates":[],"related":["CVE-2014-9907","CVE-2015-8957","CVE-2015-8958","CVE-2015-8959","CVE-2016-5687","CVE-2016-6823","CVE-2016-7101","CVE-2016-7514","CVE-2016-7515","CVE-2016-7516","CVE-2016-7517","CVE-2016-7518","CVE-2016-7519","CVE-2016-7522","CVE-2016-7523","CVE-2016-7524","CVE-2016-7525","CVE-2016-7526","CVE-2016-7527","CVE-2016-7528","CVE-2016-7529","CVE-2016-7530","CVE-2016-7531","CVE-2016-7533","CVE-2016-7535","CVE-2016-7537","CVE-2016-7799","CVE-2016-7800","CVE-2016-7996","CVE-2016-7997","CVE-2016-8682","CVE-2016-8683","CVE-2016-8684","CVE-2016-8862"]},"timeline":[{"kind":"published","date":"2016-12-01T13:22:05.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:48:30.089Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T10:00:49.760Z","stale":false,"partial":false}}