CVE-2014-1958: Canonical Ubuntu Linux

High severity, CVSS 8.8. EPSS: 3.5% chance of exploitation in the next 30 days.

Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attackers to execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-2030.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 12.10 only; version 13.10 only
• ImageMagick ImageMagick: before 6.8.8-5 (fixed in 6.8.8-5)
• Opensuse Opensuse: version 11.4 only; version 12.3 only; version 13.1 only

Published 2020-02-06. Last modified 2026-06-17.