CVE-2016-9556: Debian Linux

Medium severity, CVSS 5.5. EPSS: 2.3% chance of exploitation in the next 30 days.

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.

Affected products

• Debian Debian Linux: version 8.0 only
• ImageMagick ImageMagick: version 7.0.3-8 only
• Opensuse Project Leap: version 42.1 only

Published 2017-03-23. Last modified 2026-06-17.