CVE-2016-8684: Debian Linux

High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days.

The MagickMalloc function in magick/memory.c in GraphicsMagick 1.3.25 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure and a "file truncation error for corrupt file."

Affected products

• Debian Debian Linux: version 8.0 only
• Graphicsmagick Graphicsmagick: version 1.3.25 only
• Opensuse Opensuse: version 13.2 only

Published 2017-02-15. Last modified 2026-06-17.