ImageMagick Denial of Service Vulnerability (CNVD-2017-21004)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'DestroyImage' function of the MagickCore/image.c file in ImageMagick...

CVE-2017-12597

OpenCV Open Source Computer Vision Library (

CVE-2017-12605

OpenCV Open Source Computer Vision Library (up to 3.3) contains an out-of-bounds write in FillColorRow8 (utils.cpp) when reading images via cv::imread, as identified in CVE-2017-12605. Connected sources confirm the affected component and function, and multiple advisories surface the risk across d...

CVE-2017-12606

OpenCV (Open Source Computer Vision Library) up to version 3.3 is affected by CVE-2017-12606 due to an out-of-bounds write in FillColorRow4 in utils.cpp when reading an image with cv::imread. The described impact is memory corruption, with exploitation status not provided in the supplied document...

CVE-2017-12604

OpenCV CVE-2017-12604 affects OpenCV up to version 3.3, where an out-of-bounds write occurs in FillUniColor (utils.cpp) when reading an image via cv::imread. The vulnerability is tied to memory write behavior and is documented across multiple advisories; Debian LTS notes patches in 2.4.9.1+dfsg1-...

USN-3363-2: ImageMagick regression

USN-3363-1 fixed vulnerabilities in ImageMagick. The update caused a regression for certain users when processing images. The problematic patch has been reverted pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered that ImageMagick...

GraphicsMagick buffer overflow vulnerability (CNVD-2017-19974)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A buffer overflow vulnerability exists in the 'WriteCMYKImage' function in the coders/cmyk.c file in GraphicsMagick version 1.3.26. An attacker can exploit...

Code injection

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage function in coders/tiff.c...

Memory corruption

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage function in coders/mat.c...

CVE-2017-11640

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage function in coders/tiff.c...

[SECURITY] Fedora 25 Update: GraphicsMagick-1.3.26-3.fc25

GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...

[SECURITY] Fedora 24 Update: GraphicsMagick-1.3.26-3.fc24

GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...

ImageMagick 'coders/histogram.c' Denial of Service Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'WriteHISTOGRAMImage' function in the coders/histogram.c file in...

[SECURITY] Fedora 26 Update: GraphicsMagick-1.3.26-3.fc26

GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...

CVE-2017-11537

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception FPE in the WritePALMImage function in coders/palm.c, related to an incorrect bits-per-pixel calculation...

DEBIAN-CVE-2017-11528

The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service memory leak via a crafted file...

PYSEC-2017-118

There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

PYSEC-2017-121

There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

[SECURITY] Fedora 24 Update: GraphicsMagick-1.3.26-1.fc24

GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...

[SECURITY] Fedora 25 Update: GraphicsMagick-1.3.26-1.fc25

GraphicsMagick is a comprehensive image processing package which is initial ly based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performan ce of the software...