CVE-2014-9843

The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors...

CVE-2014-9854

CVE-2014-9854 affects ImageMagick, specifically the tiff coder (coders/tiff.c). The vulnerability allows remote attackers to cause an application crash (DoS) via vectors related to image identification. The supplied connected documents confirm the existence of this CVE within ImageMagick and desc...

Denial Of Service (DoS) Through Buffer Overflow

ImageMagick is vulnerable to denial of service DoS attacks. These attacks are possible due to an integer overflow in coders/icon.c...

CVE-2015-8894

CVE-2015-8894 describes a double-free vulnerability in ImageMagick 7.0.0 and later, occurring in the encoder/tga.c code path. A crafted TGA file can trigger an application crash (DoS). The issue is specified as a vulnerability in coders/tga.c and is not accompanied by details on exploitation vect...

CVE-2017-6335

The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file...

CVE-2017-6335

The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file...

CVE-2017-6335

CVE-2017-6335 is rejected; this entry does not represent an active vulnerability.

ImageMagick Buffer Overflow Vulnerability (CNVD-2017-03038)

ImageMagick is an open source image viewing and editing tool for Unix/Linux platforms. A buffer overflow vulnerability exists in the coders/tiff.c implementation in versions of ImageMagick prior to 6.9.5-1. It is possible for a remote attacker to exploit this vulnerability to cause a denial of...

CVE-2016-10070

Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted mat file...

CVE-2016-10066

CVE-2016-10066 is an ImageMagick vulnerability. A buffer overflow in the ReadVIFFImage function (coders/viff.c) on ImageMagick before 6.9.4-5 allows a remote attacker to crash the application (denial of service) by supplying a crafted VIFF file. The issue stems from a flaw in handling VIFF image ...

Design/Logic Flaw

coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service application crash via a mat file with an invalid number of frames...

Out-of-bounds

coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted mat file...

CVE-2016-10071

coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted mat file...

CVE-2016-10069

coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service application crash via a mat file with an invalid number of frames...

CVE-2017-6335

The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file...

CVE-2015-8902

The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service infinite loop via a crafted PDB file...

CVE-2016-8683

GraphicsMagick 1.3.25 and earlier is affected by CVE-2016-8683 due to a vulnerability in ReadPCXImage (coders/pcx.c). Remote attackers can trigger a memory allocation failure in the PCX coder, potentially leading to denial of service. Documented in multiple advisories (e.g., Mageia MGASA-2017-022...

CVE-2016-2317

Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service crash via a crafted SVG file, related to the 1 TracePoint function in magick/render.c, 2 GetToken function in magick/utility.c, and 3 GetTransformTokens function in coders/svg.c...

CVE-2016-10144

coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check...

ImageMagick 'coders/rle.c' Remote Buffer Overflow Vulnerability - Windows

ImageMagick is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:imagemagick:imagemagick"...