CVE-2016-9559: Debian Linux

Medium severity, CVSS 6.5. EPSS: 3.7% chance of exploitation in the next 30 days.

coders/tiff.c in ImageMagick before 7.0.3.7 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted image.

Affected products

• Debian Debian Linux: version 8.0 only
• ImageMagick ImageMagick: before 6.9.6-5 (fixed in 6.9.6-5); from 7.0.0-0, before 7.0.3-7 (fixed in 7.0.3-7)

Published 2017-03-01. Last modified 2026-06-17.