CVE-2017-5509: ImageMagick

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write.

Affected products

• ImageMagick ImageMagick: before 6.9.7-4 (fixed in 6.9.7-4); from 7.0.0-0, before 7.0.4-4 (fixed in 7.0.4-4)

Published 2017-03-24. Last modified 2026-06-17.