Design/Logic Flaw

The bmprreaduncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service memory consumption via a crafted image...

CVE-2017-8325

The iwprocesscolstointermediate function in imagew-main.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted image...

CVE-2017-8326

libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c a...

CVE-2017-8327

The bmprreaduncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service memory consumption via a crafted image...

Code injection

libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c a...

CVE-2017-8326

libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c a...

CVE-2017-8327

The bmprreaduncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a denial of service memory consumption via a crafted image...

CVE-2017-8326

libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image, related to imagew-bmp.c a...

Debian DLA-912-1 : tiff3 security update

Multiple security issues have been found in the tiff3 image library that may allow remote attackers to cause a denial of service application crash, to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted image. For Debian 7 'Wheezy', these...

Amazon Linux AMI : GraphicsMagick (ALAS-2017-820)

The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file.CVE-2017-6335 The WPG format reader in GraphicsMagick 1.3.2...

ALPINE-CVE-2016-5010

coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF file...

The vulnerability of the Mac OS X operating system and the iOS operating system allows a perpetrator to trigger a service failure.

The vulnerability of the CoreGraphics component in the Mac OS X and iOS operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using a specially crafted image...

Debian DLA-902-1 : imagemagick security update

Two security vulnerabilities were discovered in imagemagick that allow remote attackers to cause a denial of service application crash and infinite loop or possibly other unspecified impact via a crafted image. For Debian 7 'Wheezy', these problems have been fixed in version 8:6.7.7.10-5+deb7u13...

CVE-2010-1816

Buffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service crash via a crafted image...

CVE-2017-7606

coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

CVE-2014-8354

The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds read via a crafted image file...

Out-of-bounds

The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds read via a crafted image file...

CVE-2014-8354

The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service out-of-bounds read via a crafted image file...

CVE-2017-7601

LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

CVE-2017-7599

LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...