CVE-2014-8354: The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a...

Security readout for executives and security teams

CVE-2014-8354 is an ImageMagick denial-of-service issue. A specially crafted image can trigger an out-of-bounds read in image resizing code, potentially crashing or disrupting systems that process untrusted images. The public record identifies versions before 6.8.9-9 as affected, but does not provide a CVSS score. Exposure is most likely where ImageMagick before 6.8.9-9 processes attacker-controlled or externally supplied images, such as upload, conversion, resizing, or thumbnail workflows. Systems not using ImageMagick, using fixed vendor builds, or not processing untrusted images have lower exposure. Prioritize remediation for public-facing or partner-facing image upload workflows. This is not evidenced as actively exploited in the provided sources, but disruption is plausible where vulnerable ImageMagick handles untrusted images. Internal-only, controlled-image workflows can follow normal patch cycles after exposure is confirmed. Mitigation focus: Identify ImageMagick installations older than 6.8.9-9.; Upgrade to 6.8.9-9 or a vendor-supported fixed package.; Prioritize systems processing untrusted or internet-sourced images..

Prepared

Jun 13, 2026, 05:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.