CVE-2018-16412: ImageMagick

High severity, CVSS 8.8. EPSS: 4.5% chance of exploitation in the next 30 days.

ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function.

Affected products

• ImageMagick ImageMagick: version 7.0.8-11 only
• Opensuse Leap: version 15.0 only

Published 2018-09-03. Last modified 2026-06-17.