CVE-2014-9840: ImageMagick

Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days.

ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file.

Affected products

• ImageMagick ImageMagick: version 6.8.9-9 only

Published 2017-03-22. Last modified 2026-06-17.