CVE-2014-9907

coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file.

• CWE-20

• http://www.openwall.com/lists/oss-security/2016/09/22/2Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/93231Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1378734Issue Tracking
• https://github.com/ImageMagick/ImageMagick/commit/21eae25a8db5fdcd112dbcfcd9e5c37e32d32e2fIssue Tracking, Patch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/commit/504ada82b6fa38a30c846c1c29116af7290decb2Issue Tracking, Patch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/commit/d7325bac173492b358417a0ad49fabad44447d52Issue Tracking, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/09/22/2Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/93231Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1378734Issue Tracking
• https://github.com/ImageMagick/ImageMagick/commit/21eae25a8db5fdcd112dbcfcd9e5c37e32d32e2fIssue Tracking, Patch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/commit/504ada82b6fa38a30c846c1c29116af7290decb2Issue Tracking, Patch, Third Party Advisory
• https://github.com/ImageMagick/ImageMagick/commit/d7325bac173492b358417a0ad49fabad44447d52Issue Tracking, Patch, Third Party Advisory

Published

Apr 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-9901The Qualcomm Wi-Fi driver in Android before 2016-08-05 on Ne…
• CVE-2014-9902Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in…
• CVE-2014-9903The sched_read_attr function in kernel/sched/core.c in the L…
• CVE-2014-9904The snd_compress_check_input function in sound/core/compress…7.8
• CVE-2014-9905Multiple cross-site scripting (XSS) vulnerabilities in the W…6.1
• CVE-2014-9906Use-after-free vulnerability in DBD::mysql before 4.029 allo…
• CVE-2014-9908A Denial of Service vulnerability exists in Google Android 4…6.5
• CVE-2014-9909An elevation of privilege vulnerability in the Broadcom Wi-F…
• CVE-2014-9910An elevation of privilege vulnerability in the Broadcom Wi-F…
• CVE-2014-9911Stack-based buffer overflow in the ures_getByKeyWithFallback…
• CVE-2014-9912The get_icu_disp_value_src_php function in ext/intl/locale/l…
• CVE-2014-9913Buffer overflow in the list_files function in list.c in Info…