Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2016-7530 Details

Description

The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds write) via a crafted file.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.5 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://bugs.launchpad.net/bugs/1539053 CVEIssue TrackingThird Party Advisory
https://bugs.launchpad.net/bugs/1539067 CVEIssue TrackingThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1378762 CVEIssue TrackingPatchThird Party Advisory
https://github.com/ImageMagick/ImageMagick/commit/63346f34f9d19179599b5b256e5e8d3dda46435c CVEPatch
https://github.com/ImageMagick/ImageMagick/commit/b5ed738f8060266bf4ae521f7e3ed145aa4498a3 CVEPatch

see all 20 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-369Divide By Zero[email protected]

Affected Products

ProductVersions
imagemagick imagemagick
< 6.9.4-0

CPE

  • cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

8 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2016-7530
NVD Published Date:
Apr 20, 2017
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2016-7530 Details - Not Deferred