PT-2017-3620

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.7-1 Q16 Description: A memory exhaustion issue was found in the ReadTIFFImage function in coders/tiff.c, which allows remote attackers to cause a denial of service via a crafted file. The vulnerability is related to...

CVE-2017-14174

In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted PSD file, which claims a large "length" field in the header but does not contain sufficient backing data, is provided, the loop over...

CVE-2017-14174: Excessive Iteration

In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted PSD file, which claims a large "length" field in the header but does not contain sufficient backing data, is provided, the loop over...

CVE-2017-14173: Integer Overflow or Wraparound

In the function ReadTXTImage in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRangedepth+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a...

CVE-2017-14165

The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field in a header. This may lead to remote denial of service in the MagickMalloc function in magick/memory.c...

CVE-2017-14138

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...

CVE-2017-14137

ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header...

CVE-2017-14139

ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c...

Memory corruption

ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c...

Memory corruption

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...

CVE-2017-14138

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...

CVE-2017-14138

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...

DEBIAN-CVE-2017-14139

ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c...

CVE-2017-14139

CVE-2017-14139 is tied to ImageMagick 7.0.6-2 and a memory leak in WriteMSLImage (coders/msl.c). Connected sources confirm the affected component is the MSL image writer, but do not provide further technical details beyond the location of the leak. The other references associate ImageMagick packa...

CVE-2017-14139

ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c...

CVE-2017-14137

CVE-2017-14137 affects ImageMagick 7.0.6-5, where ReadWEBPImage (coders/webp.c) allocates memory based solely on a header length field, causing excessive memory allocation. This can lead to memory exhaustion/DoS. The incident is documented with this exact technical detail; no fix/version or remed...

CVE-2017-14139

ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c...

CVE-2017-14138

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...

CVE-2017-14137

ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. The attacks can be launched because the ReadVIFFImage function in coders/viff.c does not properly handle malicious VIFF files, causing memory consumption...