CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

CVE-2017-12429

In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service...

CVE-2017-12434

CVE-2017-12434 is rejected/not used; this CVE entry does not represent an active vulnerability.

CVE-2017-12429

ImageMagick 7.0.6-1 contains a memory exhaustion vulnerability in ReadMIFFImage (coders/miff.c) that can lead to denial of service. This CVE is CVE-2017-12429. Connected sources indicate the issue exists and is unpatched in some reports; no exploit details are provided in the documents.

CVE-2017-12435

In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service...

CVE-2017-12430

In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service...

CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

CVE-2017-12432

In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to cause a denial of service...

DEBIAN-CVE-2017-12418

ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c...

UBUNTU-CVE-2017-12429

In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service...

CVE-2017-12418

ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c...

CVE-2017-12435

In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service...

ImageMagick coders/meta.c file memory leak vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'parse8BIMW' and 'format8BIM' functions of the coders/meta.c file in...

Integer overflow

The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file...

Denial Of Service Via Memory Leak

ImageMagick is susceptible to denial of service DoS attacks. A malicious user can pass a mat file to the ReadMATImage function in coders/mat.c to cause a memory leak, crashing the application...

CVE-2017-11751

The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service memory leak via a crafted file...

Memory Leaks

ImageMagick is vulnerable to memory leaks. The quantuminfo and cloneinfo data structures in ReadMATImage function are not properly sanitized in coders/mat.c, leading to memory leaks...

Denial Of Service (DoS) Through Memory Leak

ImageMagick is vulnerable to denial of service DoS attacks. These attacks can be triggered using a file given to the WritePICONImage function in coders/xpm.c...

CVE-2017-11752

CVE-2017-11752 affects ImageMagick (notably ImageMagick 7.0.6-4) via the ReadMAGICKImage function in coders/magick.c. It allows remote attackers to cause a denial of service by leaking memory when processing a crafted file. The connected Nessus entry confirms an unpatched vulnerability in this ex...

CVE-2017-11755

The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service memory leak via a crafted file that is mishandled in an AcquireSemaphoreInfo call...