Lucene search

K

Imagemagick Security Vulnerabilities

cve
cve

CVE-2017-11188

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF...

7.5CVSS

7.6AI Score

0.001EPSS

2017-07-12 03:29 PM
51
cve
cve

CVE-2017-11170

The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or VST...

8.8CVSS

7.7AI Score

0.002EPSS

2017-07-11 08:29 PM
49
cve
cve

CVE-2017-11141

The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted MAT file, related to incorrect ordering of a SetImageExtent...

6.5CVSS

6.9AI Score

0.001EPSS

2017-07-10 03:29 AM
61
cve
cve

CVE-2017-10995

The mng_get_long function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted MNG...

5.5CVSS

6.4AI Score

0.003EPSS

2017-07-07 04:29 PM
62
cve
cve

CVE-2017-10928

In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue...

8.8CVSS

8.3AI Score

0.01EPSS

2017-07-05 11:29 AM
58
cve
cve

CVE-2017-9499

In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function SetPixelChannelAttributes, which allows attackers to cause a denial of service via a crafted...

6.5CVSS

6AI Score

0.002EPSS

2017-06-07 02:29 PM
15
cve
cve

CVE-2017-9500

In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted...

6.5CVSS

6AI Score

0.003EPSS

2017-06-07 02:29 PM
66
cve
cve

CVE-2017-9501

In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted...

6.5CVSS

6.6AI Score

0.002EPSS

2017-06-07 02:29 PM
63
cve
cve

CVE-2017-9440

In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers to cause a denial of service via a crafted...

6.5CVSS

6.5AI Score

0.001EPSS

2017-06-05 06:29 PM
48
cve
cve

CVE-2017-9439

In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service via a crafted...

6.5CVSS

6.5AI Score

0.001EPSS

2017-06-05 06:29 PM
52
cve
cve

CVE-2017-9262

In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.6AI Score

0.001EPSS

2017-05-29 04:29 AM
41
cve
cve

CVE-2017-9261

In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.6AI Score

0.001EPSS

2017-05-29 04:29 AM
40
cve
cve

CVE-2017-9141

In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function in MagickCore/profile.c because of missing checks in the ReadDDSImage function in...

6.5CVSS

6.7AI Score

0.005EPSS

2017-05-22 02:29 PM
57
cve
cve

CVE-2017-9143

In ImageMagick 7.0.5-5, the ReadARTImage function in coders/art.c allows attackers to cause a denial of service (memory leak) via a crafted .art...

6.5CVSS

6.4AI Score

0.003EPSS

2017-05-22 02:29 PM
59
cve
cve

CVE-2017-9142

In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in...

6.5CVSS

6.7AI Score

0.005EPSS

2017-05-22 02:29 PM
58
cve
cve

CVE-2017-9144

In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in...

6.5CVSS

6.7AI Score

0.002EPSS

2017-05-22 02:29 PM
56
cve
cve

CVE-2017-9098

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image...

7.5CVSS

7.3AI Score

0.003EPSS

2017-05-19 07:29 PM
74
4
cve
cve

CVE-2017-8830

In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.002EPSS

2017-05-08 06:29 AM
58
cve
cve

CVE-2017-8765

The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON...

6.5CVSS

6.4AI Score

0.002EPSS

2017-05-04 04:59 AM
54
cve
cve

CVE-2017-8343

In ImageMagick 7.0.5-5, the ReadAAIImage function in aai.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.003EPSS

2017-04-30 05:59 PM
60
cve
cve

CVE-2017-8348

In ImageMagick 7.0.5-5, the ReadMATImage function in mat.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.003EPSS

2017-04-30 05:59 PM
57
cve
cve

CVE-2017-8350

In ImageMagick 7.0.5-5, the ReadJNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.003EPSS

2017-04-30 05:59 PM
57
cve
cve

CVE-2017-8344

In ImageMagick 7.0.5-5, the ReadPCXImage function in pcx.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.003EPSS

2017-04-30 05:59 PM
58
cve
cve

CVE-2017-8345

In ImageMagick 7.0.5-5, the ReadMNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.003EPSS

2017-04-30 05:59 PM
65
cve
cve

CVE-2017-8352

In ImageMagick 7.0.5-5, the ReadXWDImage function in xwd.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.6AI Score

0.003EPSS

2017-04-30 05:59 PM
55
cve
cve

CVE-2017-8353

In ImageMagick 7.0.5-5, the ReadPICTImage function in pict.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.003EPSS

2017-04-30 05:59 PM
53
cve
cve

CVE-2017-8347

In ImageMagick 7.0.5-5, the ReadEXRImage function in exr.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.003EPSS

2017-04-30 05:59 PM
56
cve
cve

CVE-2017-8349

In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.003EPSS

2017-04-30 05:59 PM
63
cve
cve

CVE-2017-8357

In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.003EPSS

2017-04-30 05:59 PM
61
cve
cve

CVE-2017-8346

In ImageMagick 7.0.5-5, the ReadDCMImage function in dcm.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.003EPSS

2017-04-30 05:59 PM
56
cve
cve

CVE-2017-8351

In ImageMagick 7.0.5-5, the ReadPCDImage function in pcd.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.003EPSS

2017-04-30 05:59 PM
58
cve
cve

CVE-2017-8355

In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.003EPSS

2017-04-30 05:59 PM
60
cve
cve

CVE-2017-8354

In ImageMagick 7.0.5-5, the ReadBMPImage function in bmp.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.003EPSS

2017-04-30 05:59 PM
52
cve
cve

CVE-2017-8356

In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) via a crafted...

6.5CVSS

6.2AI Score

0.003EPSS

2017-04-30 05:59 PM
55
cve
cve

CVE-2016-7520

Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted HDR...

6.5CVSS

6.6AI Score

0.009EPSS

2017-04-20 06:59 PM
42
cve
cve

CVE-2016-7526

coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted...

6.5CVSS

6.2AI Score

0.012EPSS

2017-04-20 06:59 PM
46
cve
cve

CVE-2016-7535

coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PSD...

6.5CVSS

6.3AI Score

0.005EPSS

2017-04-20 06:59 PM
46
cve
cve

CVE-2016-7518

The ReadSUNImage function in coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SUN...

6.5CVSS

6.3AI Score

0.005EPSS

2017-04-20 06:59 PM
61
cve
cve

CVE-2016-7525

Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD...

6.5CVSS

6.5AI Score

0.009EPSS

2017-04-20 06:59 PM
40
cve
cve

CVE-2016-7527

coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted...

6.5CVSS

6.3AI Score

0.012EPSS

2017-04-20 06:59 PM
42
cve
cve

CVE-2016-7540

coders/rgf.c in ImageMagick before 6.9.4-10 allows remote attackers to cause a denial of service (assertion failure) by converting an image to rgf...

6.5CVSS

6.5AI Score

0.008EPSS

2017-04-20 06:59 PM
34
cve
cve

CVE-2016-7521

Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD...

6.5CVSS

6.9AI Score

0.009EPSS

2017-04-20 06:59 PM
46
cve
cve

CVE-2016-7532

coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD...

6.5CVSS

6AI Score

0.007EPSS

2017-04-20 06:59 PM
44
cve
cve

CVE-2016-7534

The generic decoder in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted...

6.5CVSS

6.2AI Score

0.007EPSS

2017-04-20 06:59 PM
51
cve
cve

CVE-2016-7536

magick/profile.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted...

6.5CVSS

6.3AI Score

0.008EPSS

2017-04-20 06:59 PM
38
cve
cve

CVE-2016-7538

coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted...

6.5CVSS

6AI Score

0.011EPSS

2017-04-20 06:59 PM
42
cve
cve

CVE-2016-7530

The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds write) via a crafted...

6.5CVSS

6.8AI Score

0.012EPSS

2017-04-20 06:59 PM
51
cve
cve

CVE-2015-8957

Buffer overflow in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (application crash) via a crafted SUN...

6.5CVSS

6.5AI Score

0.006EPSS

2017-04-20 06:59 PM
53
cve
cve

CVE-2015-8959

coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (CPU consumption) via a crafted DDS...

6.5CVSS

6.6AI Score

0.006EPSS

2017-04-20 06:59 PM
54
cve
cve

CVE-2015-8958

coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted SUN...

6.5CVSS

6.3AI Score

0.005EPSS

2017-04-20 06:59 PM
48
Total number of security vulnerabilities647