CVE-2016-7906

magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a crafted file.

• CWE-416

• http://www.debian.org/security/2016/dsa-3726Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/10/02/1Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/10/02/3Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/93271Third Party Advisory, VDB Entry
• https://github.com/ImageMagick/ImageMagick/commit/90406972f108c4da71f998601b06abdc2ac6f06ePatch, Vendor Advisory
• https://github.com/ImageMagick/ImageMagick/issues/281Issue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201611-21Third Party Advisory
• http://www.debian.org/security/2016/dsa-3726Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/10/02/1Mailing List, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/10/02/3Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/93271Third Party Advisory, VDB Entry
• https://github.com/ImageMagick/ImageMagick/commit/90406972f108c4da71f998601b06abdc2ac6f06ePatch, Vendor Advisory
• https://github.com/ImageMagick/ImageMagick/issues/281Issue Tracking, Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201611-21Third Party Advisory

Published

Jan 18, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7900Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-7901Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-7902Unrestricted file upload vulnerability in the fileUnzip->unz…
• CVE-2016-7903Dotclear before 2.10.3, when the Host header is not part of …
• CVE-2016-7904Cross-site request forgery (CSRF) vulnerability in CMS Made …
• CVE-2016-7905The read_gab2_sub function in libavformat/avidec.c in FFmpeg…
• CVE-2016-7907The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka …4.4
• CVE-2016-7908The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka …4.4
• CVE-2016-7909The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka …4.4
• CVE-2016-7910Use-after-free vulnerability in the disk_seqf_stop function …7.8
• CVE-2016-7911Race condition in the get_task_ioprio function in block/iopr…7.8
• CVE-2016-7912Use-after-free vulnerability in the ffs_user_copy_worker fun…7.8