CVE Catalog
CVE-2016-5687
CriticalSummary
The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read.
Risk Assessment
An attacker may exploit this vulnerability to perform attacks that could lead to unauthorized memory access or application crashes.
Recommendation
It is recommended to update ImageMagick to the latest version to mitigate this vulnerability.
Original NVD description (English source)
The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read.