cve/2016/CVE-2016-9556.md

CVE-2016-9556

Description

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.

POC

Reference

• http://www.openwall.com/lists/oss-security/2016/12/01/4
• https://blogs.gentoo.org/ago/2016/11/19/imagemagick-heap-based-buffer-overflow-in-ispixelgray-pixel-accessor-h

Github

• https://github.com/mrash/afl-cve