CVE Catalog

CVE-2016-5691

Critical
Published: Translated: NVD NIST

Summary

The DCM reader in ImageMagick before version 6.9.4-5 and 7.x before version 7.0.1-7 allows remote attackers to exploit the lack of validation of pixel values (red, green, blue), potentially leading to unspecified impact.

Risk Assessment

The lack of validation of pixel values may allow attackers to remotely execute malicious code or perform other undesirable actions, posing a threat to the integrity and availability of the system.

Recommendation

It is recommended to update ImageMagick to the latest version to mitigate this vulnerability and to implement additional security measures against unauthorized access.

Original NVD description (English source)

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of validation of (1) pixel.red, (2) pixel.green, and (3) pixel.blue.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS