The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCanonical Ubuntu
OSCanonical12.0414.0416.0416.10Imagemagick
APPImagemagick6.8.8-9Opensuse
OSOpensuse13.2Opensuse Project Leap
OSOpensuse Project42.1Opensuse Project SUSE Linux Enterprise Desktop
OSOpensuse Project12.0Opensuse Project SUSE Linux Enterprise Server
OSOpensuse Project12.0Opensuse Project SUSE Linux Enterprise Software Development Kit
OSOpensuse Project12.0Opensuse Project SUSE Linux Enterprise Workstation Extension
OSOpensuse Project12.0
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References
Related vulnerabilities
CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product
Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)
CVE-2022-0543CRITICAL10.0⚠ KEVPL ✓same product
Redis – ucieczka z Lua sandbox umożliwiająca zdalne wykonanie kodu (RCE)
CVE-2020-11651CRITICAL9.8⚠ KEVPL ✓same product
SaltStack Salt: nieautoryzowany dostęp do metod salt-master umożliwiający RCE
CVE-2020-7247CRITICAL9.8⚠ KEVPL ✓same product
RCE jako root w OpenSMTPD przez command injection w polu MAIL FROM
CVE-2019-16928CRITICAL9.8⚠ KEVPL ✓same product
RCE w Exim — heap-based buffer overflow w obsłudze komendy EHLO