CVE-2015-8900: ImageMagick

Medium severity, CVSS 5.5. EPSS: 1.7% chance of exploitation in the next 30 days.

The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file.

Affected products

• ImageMagick ImageMagick: from 6.0, up to and including 6.9.3-10; from 7.0.1-0, up to and including 7.0.5-0

Published 2017-02-27. Last modified 2026-06-17.