CVE-2016-7540

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-04-20 · updated 2026-06-17
Weakness: CWE-19

Description

coders/rgf.c in ImageMagick before 6.9.4-10 allows remote attackers to cause a denial of service (assertion failure) by converting an image to rgf format.

Affected products

ImageMagick: through 6.9.4-9

References

http://www.openwall.com/lists/oss-security/2016/09/22/2
http://www.securityfocus.com/bid/93228
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1594060
https://bugzilla.redhat.com/show_bug.cgi?id=1378777
https://github.com/ImageMagick/ImageMagick/commit/a0108a892f9ea3c2bb1e7a49b7d71376c2ecbff7
https://github.com/ImageMagick/ImageMagick/pull/223
http://www.openwall.com/lists/oss-security/2016/09/22/2
http://www.securityfocus.com/bid/93228
https://bugs.launchpad.net/ubuntu/+source/imagemagick/+bug/1594060
https://bugzilla.redhat.com/show_bug.cgi?id=1378777
https://github.com/ImageMagick/ImageMagick/commit/a0108a892f9ea3c2bb1e7a49b7d71376c2ecbff7
https://github.com/ImageMagick/ImageMagick/pull/223

Get alerted when CVE-2016-7540 or the next vulnerability affects your stack