Lucene search
K

18 matches found

Github Security Blog
Github Security Blog
added 2026/02/24 3:32 p.m.7 views

ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

In ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereference and crash. AddressSanitizer:DEADLYSIGNAL ================================================================= ==1414421==ERROR:...

7.5CVSS5.3AI score0.00376EPSS
Exploits0References6Affected Software18
Cvelist
Cvelist
added 2026/02/24 12:54 a.m.18 views

CVE-2026-25795 ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

5.3CVSS0.00376EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/24 12:54 a.m.3 views

CVE-2026-25795 ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

5.3CVSS5.9AI score0.00376EPSS
Exploits0References1
CVE
CVE
added 2026/02/24 12:54 a.m.20 views

CVE-2026-25795

ImageMagick vulnerability CVE-2026-25795 affects the ReadSFWImage() path (coders/sfw.c): when temporary-file creation fails, read_info is destroyed before its filename is accessed, causing a NULL pointer dereference and crash. A patch is stated for versions 7.1.2-15 and 6.9.13-40. Connected advis...

7.5CVSS5.3AI score0.00376EPSS
Exploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 4:41 a.m.1 views

SUSE CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

7.5CVSS8.6AI score0.01236EPSS
Exploits0References5
ossfuzz
ossfuzz
added 2018/02/07 9:10 a.m.20 views

graphicsmagick/coder_CUT_fuzzer: Unknown signal in DestroyImageInfo

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4849701372297216 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderCUTfuzzer Fuzz target binary: coderCUTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

6.7AI score
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2017/08/31 2:48 p.m.31 views

CVE-2017-13658

In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service assertion failure and application exit in the DestroyImageInfo function in MagickCore/image.c...

6.5CVSS3.3AI score0.01327EPSS
Exploits0References1
Veracode
Veracode
added 2017/08/24 6:16 p.m.30 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. These attacks can be conducted because there is a missing NULL check in the ReadMATImage function which leads to an assertion failure and application exit from within the DestroyImageInfo function...

6.5CVSS6.7AI score0.01327EPSS
Exploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2017/08/24 6:29 a.m.35 views

CVE-2017-13658

In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service assertion failure and application exit in the DestroyImageInfo function in MagickCore/image.c...

6.5CVSS6.8AI score0.01327EPSS
Exploits0References1
NVD
NVD
added 2017/08/24 6:29 a.m.23 views

CVE-2017-13658

In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service assertion failure and application exit in the DestroyImageInfo function in MagickCore/image.c...

6.5CVSS7.4AI score0.01327EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2017/08/24 6:0 a.m.43 views

CVE-2017-13658

In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service assertion failure and application exit in the DestroyImageInfo function in MagickCore/image.c...

6.5CVSS7.3AI score0.01327EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2017/08/10 12:0 a.m.5 views

The vulnerability of the ReadMATImage function in the coder/mat.c file of the console image editing tool ImageMagick allows a hacker to cause a service failure.

The vulnerability of the ReadMATImage function in the coder/mat.c file of the console-based graphic editor ImageMagick exists due to insufficient checking of input data lack of checks for zero values. Exploiting this vulnerability could allow a malicious actor to cause a service failure the...

4.3CVSS7.1AI score0.01236EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2017/08/04 10:29 a.m.27 views

CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

6.5CVSS6.8AI score0.01236EPSS
Exploits0References1
Prion
Prion
added 2017/08/04 10:29 a.m.20 views

Input validation

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

4.3CVSS6.2AI score0.01236EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2017/08/04 10:29 a.m.20 views

CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

6.5CVSS7.5AI score0.01236EPSS
Exploits0References2
OSV
OSV
added 2017/08/04 10:29 a.m.2 views

UBUNTU-CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

6.5CVSS6.9AI score0.01236EPSS
Exploits0References2
OSV
OSV
added 2017/08/04 10:29 a.m.1 views

DEBIAN-CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

6.5CVSS6.5AI score0.01236EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2017/08/04 10:0 a.m.30 views

CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

6.5CVSS7.8AI score0.01236EPSS
Exploits0
Rows per page
Query Builder