CVE-2007-4987: ImageMagick

High severity, CVSS 9.3. EPSS: 3.8% chance of exploitation in the next 30 days.

Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted image file, which triggers the writing of a '\0' character to an out-of-bounds address.

Affected products

• ImageMagick ImageMagick: version 5.3.3 only; version 5.3.8 only; version 5.4.2.3 only; version 5.4.3 only; version 5.4.4.5 only; version 5.4.7 only; …

Published 2007-09-24. Last modified 2026-06-16.