Design/Logic Flaw

GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it...

CVE-2017-13775

GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests...

CVE-2017-13777

GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it...

CVE-2017-13776

GraphicsMagick 1.3.26 has a denial-of-service issue in ReadXBMImage() (coders/xbm.c) during the Read hex image data path for version!=10, leading to excessive CPU and memory use when given a crafted file. The current documents do not specify a concrete fixed version or patch for this CVE (CVE-201...

CVE-2017-13769

The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service buffer over-read by sending a crafted JPEG file...

CVE-2017-13775

GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests...

CVE-2017-13776

GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it...

CVE-2017-13777

GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it...

CVE-2017-13775

Technical details about CVE-2017-13775 are not publicly provided in the connected documents. The initial description notes a DoS in GraphicsMagick ReadJNXImage(), but no product/version specifics or remediation are included here. Monitor for updates.

PT-2017-13088

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-10 Description The issue allows an attacker to cause a denial of service by sending a crafted JPEG file, exploiting the WriteTHUMBNAILImage function in coders/thumbnail.c. Recommendations For ImageMagick versions...

CVE-2017-13776: Excessive Iteration

GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it...

CVE-2017-13775: Undefined Security Weakness

GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests...

CVE-2017-13777: Excessive Iteration

GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it...

PT-2017-3852

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to the use of memory after it has been freed, specifically in the ReadJNGImage and ReadOneJNGImage functions in the coders/png.c file of the GraphicsMagick library. This can be...

PT-2017-3856

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to errors in handling JPEG images, specifically with the ReadOneJNGImage function in coders/png.c. This can be exploited by a remote attacker to cause a denial of service, resultin...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks through a memory leak. It does not properly handle memory allocation in the ReadMATImage function in coders/mat.c, causing memory leaks through a malicious MAT file input...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. The attacks are possible because it is possible to bypass the validation of channel geometry in the ReadJP2Image function in coders/jp2.c...

CVE-2017-12667

ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders\mat.c...

Information Disclosure

ImageMagick is susceptible to information disclosure. When loading raster data, the library accesses uninitialized data in ReadMATImage function in coders/mat.c, disclosing sensitive information...

CVE-2017-13658

In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service assertion failure and application exit in the DestroyImageInfo function in MagickCore/image.c...