VDB
ALPINE-CVE-2016-5841
ALPINE-CVE-2016-5841
PUBLISHED
CVSS 9.800000190734863 CRITICAL
Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via vectors involving the offset variable.
Risk Scores
CVSS 3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.2 | imagemagick | 6.7.0.3-r0, 6.6.9.8-r1, 6.6.7.9-r1 |
| Alpine:v3.4 | imagemagick | 6.9.2.7-r0, 6.9.2.8-r0, 6.9.2.8-r1 |
| Alpine:v3.3 | imagemagick | 6.6.8.7-r0, 6.6.9.1-r0, 6.6.3.6-r0 |
Timeline
- Dec 13, 2016 CVE Published
- Nov 19, 2025 CVE Updated
- Apr 30, 2026 Distribution Patch