In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file.
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Imagemagick | Imagemagick | 7.0.7-12-q16 (including) | 7.0.7-12-q16 (including) |
| Imagemagick | Ubuntu | artful | * |
| Imagemagick | Ubuntu | bionic | * |
| Imagemagick | Ubuntu | devel | * |
| Imagemagick | Ubuntu | upstream | * |
| Imagemagick | Ubuntu | xenial | * |
| Imagemagick | Ubuntu | zesty | * |