What’s Vulnerable › Vulnerabilities
CVE-2014-9837
- Severity: medium (CVSS 6.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-04-11 · updated 2026-06-17
- Weakness: CWE-125
Description
coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service (crash) via a crafted png file.
Affected products
- ImageMagick: through 6.9.0-1
References
- http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26682
- http://www.openwall.com/lists/oss-security/2016/06/02/13
- https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=7a7119c6fe19324ee17b8f756dae60c16e470ab2
- http://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=26682
- http://www.openwall.com/lists/oss-security/2016/06/02/13
- https://anonscm.debian.org/cgit/collab-maint/imagemagick.git/commit/?h=debian-patches/6.8.9.9-4-for-upstream&id=7a7119c6fe19324ee17b8f756dae60c16e470ab2
Get alerted when CVE-2014-9837 or the next vulnerability affects your stack