CVE-2007-4986: ImageMagick

Medium severity, CVSS 6.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow.

Affected products

• ImageMagick ImageMagick: version 5.3.3 only; version 5.3.8 only; version 5.4.2.3 only; version 5.4.3 only; version 5.4.4.5 only; version 5.4.7 only; …

Published 2007-09-24. Last modified 2026-06-16.