CVE-2017-9440: In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allow...

Security readout for executives and security teams

This CVE describes a memory leak in ImageMagick 7.0.5-5 when reading crafted PSD image data. If a system accepts or processes untrusted images, an attacker could exhaust resources and disrupt service. The provided sources do not show active exploitation, CVSS scoring, or a named fixed version. Exposure is most likely where ImageMagick 7.0.5-5 processes PSD files, especially from uploads, email attachments, CMS media libraries, or automated conversion pipelines. Systems not processing untrusted PSD content have lower practical exposure. Treat this as a service-availability risk. Prioritize remediation for internet-facing upload paths or business-critical image pipelines. It is less urgent than confirmed exploited remote code execution, but reachable untrusted file processing can make the denial-of-service impact material. Mitigation focus: Check ImageMagick and operating-system vendor guidance for fixed or backported packages.; Upgrade ImageMagick where vendor guidance identifies a corrected build.; Restrict or disable PSD processing for untrusted uploads if it is not required..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.