CVE-2016-10051

Published: Mar 23, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.

Affected (3)

Products: Imagemagick: Imagemagick · Opensuse: Leap

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Imagemagick Imagemagick	Version 6.9.5-5

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 42.1
Opensuse Leap	Version 42.2

Related CWEs

CWE-416

Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (16)

http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2017-02/msg00031.html

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/12/26/9

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/95187

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1410456

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://github.com/ImageMagick/ImageMagick/commit/548701354191a3dda5cffc6d415374b35b01d0b9

Source: cve@mitre.org

PatchVendor Advisory

https://github.com/ImageMagick/ImageMagick/commit/ecc03a2518c2b7dd375fde3a040fdae0bdf6a521

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=30245

Source: cve@mitre.org

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2017-02/msg00028.html