CVE-2014-9826

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-388

Affected software

No affected versions have been published.

Timeline

Published
Mar 30, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2014

CVE-2014-98278.8coders/xpm.c in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file.CVE-2014-98288.8coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file.CVE-2014-98296.5coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted sun file.CVE-2014-98308.8coders/sun.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted sun file.CVE-2014-98318.8coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted wpg file.CVE-2014-98327.8Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file.CVE-2014-98337.8Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file.CVE-2014-98347.8Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file.CVE-2014-98357.8Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file.CVE-2014-98365.5ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file.CVE-2014-98376.5coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service (crash) via a crafted png file.CVE-2014-98385.5magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash).
CVE-2014-9826: Critical severity, CVSS 9.8 | Vulnix