CVE-2015-8902: The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to...

Security readout for executives and security teams

This is an ImageMagick denial-of-service issue. If a system processes a malicious PDB image file with an affected ImageMagick 6.x version, the parser can enter an infinite loop and tie up processing resources. Exposure is most likely in applications, batch jobs, or web services that use ImageMagick 6.x to process attacker-supplied or untrusted image files, especially where PDB files are accepted or auto-detected. Treat this as a moderate availability risk. Prioritize internet-facing or customer-facing image-processing services, because exploitation can consume worker capacity without requiring authentication if untrusted files are processed. Mitigation focus: Upgrade ImageMagick to 6.9.0-5 Beta or a later vendor-fixed package.; Check distribution advisories for the exact fixed package version in your environment.; Limit processing of untrusted image files until affected systems are updated..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.