ImageMagick memory leak vulnerability (CNVD-2018-00094)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory leak vulnerability exists in the ReadMATImage function in coders/mat.c in ImageMagick version 7.0.7-12 Q16. An attacker can exploit this vulnerability to caus...

CVE-2017-17883

ImageMagick 7.0.7-12 Q16 is affected by a memory-leak vulnerability in ReadPGXImage (coders/pgx.c) that can cause denial of service via a crafted PGX image file. The issue is documented across multiple sources (SUSE, Red Hat, Ubuntu and OSV/NVD mirrors). No public exploitation details or remediat...

CVE-2017-17884

In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability is present in the PNG coder function WriteOnePNGImage (coders/png.c) that can cause a denial of service via a crafted PNG image. The CVE entry provides this concrete detail and does not list an available fix in the supplied documents. Pract...

CVE-2017-17887

CVE-2017-17887 affects ImageMagick 7.0.7-16 Q16. A memory leak in GetImagePixelCache (magick/cache.c) can be triggered by processing a crafted MNG image via ReadOneMNGImage, potentially leading to denial of service. No remediation or patch details are provided in the supplied documents.

CVE-2017-17886

ImageMagick 7.0.7-12 Q16 (ReadPSDChannelZip in coders/psd.c) contains a memory-leak vulnerability that can be exploited to cause a denial of service via a crafted PSD image. The description explicitly ties this CVE-2017-17886 to a PSD parsing path in ReadPSDChannelZip, leading to resource exhaust...

CVE-2017-17882

Technical details (affected versions, root cause, exploit information, and patch status) for CVE-2017-17882 are not provided in the connected documents. Monitor for updates.

CVE-2017-17680

CVE-2017-17680 affects ImageMagick 7.0.7-12 Q16; memory leak in ReadXPMImage (coders/xpm.c) can cause denial of service via a crafted XPM image. No exploitation details or patched version are provided in the supplied documents; remediation not specified.

CVE-2017-15017

ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c...

CVE-2017-14684

In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service memory consumption in ResizeMagickMemory in MagickCore/memory.c via a crafted file...

CVE-2017-15017

ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c...

CVE-2017-15017

CVE-2017-15017: ImageMagick 7.0.7-0 Q16 is affected by a NULL pointer dereference in ReadOneMNGImage (coders/png.c). The connected Nessus entry notes a lack of vendor patch for this unpatched version (ImageMagick 7.0.7-0 Q16). No further technical details or remediation are provided in the docume...

CVE-2017-15015

ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c...

CVE-2017-14624

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c...

CVE-2017-14684

In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service memory consumption in ResizeMagickMemory in MagickCore/memory.c via a crafted file...

Out-of-bounds

In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...

CVE-2017-14326

In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file...

Heap overflow

A heap-based buffer over-read in SampleImage in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file...

CVE-2017-14175

CVE-2017-14175 is rejected; this candidate is not used and does not represent an active vulnerability.

CVE-2017-14172

In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted PSD file, which claims a large "extent" field in the header but does not contain sufficient backing data, is provided, the loop over "length"...

CVE-2017-9500

In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted file...