CVE-2016-8707 — ImageMagick: OOB write in convert utility when deflating TIFF files

Back Back to CVE browser

HIGH

ImageMagick: OOB write in convert utility when deflating TIFF files

Published Dec 23, 2016

7.8

HIGH

CVSS 3.1

EPSS 3.65%

Description

An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability can be triggered through any user controlled TIFF that is handled by this functionality.

Affected products

Vendor n/a Product ImageMagick 7.0.3-1 Default
n/a
- Version
  ImageMagick 7.0.3-1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

ImageMagick 7.0.3-1

n/a

Version	Status	Constraints
ImageMagick 7.0.3-1	affected	-

Red Hat Enterprise Linux 5

ImageMagick

Not affected
Red Hat Enterprise Linux 6

ImageMagick

Will not fix
Red Hat Enterprise Linux 7

ImageMagick

Will not fix
Red Hat OpenShift Enterprise 2

ImageMagick

Will not fix

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	ImageMagick	Not affected	n/a
Red Hat Enterprise Linux 6	ImageMagick	Will not fix	n/a
Red Hat Enterprise Linux 7	ImageMagick	Will not fix	n/a
Red Hat OpenShift Enterprise 2	ImageMagick	Will not fix	n/a

Remediation

No remediation recorded yet.

Metrics

3.65% 0.03653

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.03653

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (13 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	3.65% (0.03653)	89.24th	v5 (v2026.06.15)
Jun 15, 2026	3.65% (0.03653)	88.13th	v5 (v2026.06.15)
Jun 19, 2025	2.63% (0.02630)	85.01th	v4 (v2025.03.14)
Apr 21, 2025	1.60% (0.01605)	80.69th	v4 (v2025.03.14)
Mar 17, 2025	3.16% (0.03157)	86.05th	v4 (v2025.03.14)
Dec 17, 2024	3.12% (0.03117)	90.86th	v3 (v2023.03.01)
May 3, 2024	1.07% (0.01071)	84.12th	v3 (v2023.03.01)
May 10, 2023	1.07% (0.01071)	82.09th	v3 (v2023.03.01)
Mar 7, 2023	0.92% (0.00921)	80.49th	v3 (v2023.03.01)
Mar 6, 2023	5.59% (0.05593)	90.06th	v2 (v2022.01.01)
Nov 3, 2022	5.59% (0.05593)	89.77th	v2 (v2022.01.01)
Apr 1, 2022	4.97% (0.04967)	88.42th	v2 (v2022.01.01)
Feb 4, 2022	4.97% (0.04967)	74.91th	v2 (v2022.01.01)

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (7)

http://www.debian.org/security/2017/dsa-3799
vendor-advisoryx_refsource_DEBIANThird Party Advisory
http://www.securityfocus.com/bid/94727
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.talosintelligence.com/reports/TALOS-2016-0216/
x_refsource_MISCExploitTechnical DescriptionThird Party Advisory
https://access.redhat.com/security/cve/CVE-2016-8707
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1408375
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2016-8707
https://www.cve.org/CVERecord?id=CVE-2016-8707

Link	Providers	Tags
http://www.debian.org/security/2017/dsa-3799		vendor-advisoryx_refsource_DEBIANThird Party Advisory
http://www.securityfocus.com/bid/94727		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.talosintelligence.com/reports/TALOS-2016-0216/		x_refsource_MISCExploitTechnical DescriptionThird Party Advisory
https://access.redhat.com/security/cve/CVE-2016-8707		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1408375		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2016-8707
https://www.cve.org/CVERecord?id=CVE-2016-8707