2498 matches found
CVE-2017-11360: Excessive Iteration
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge numberpixels value...
PT-2017-11952
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.5-10 Description A crafted RLE image can cause a crash due to incorrect EOF handling in the coders/rle.c file. This issue is a result of an incomplete fix for a previous problem. Recommendations For versions...
CVE-2017-11352: Undefined Security Weakness
In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144...
PT-2017-12074
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-1 Description The issue arises when ImageMagick processes a crafted file using the convert function, leading to a memory leak in the WriteMPCImage function located in coders/mpc.c. Recommendations For ImageMagick...
CVE-2017-11310
CVE-2017-11310 entry rejected/not used; does not represent an active vulnerability.
CVE-2017-11188
No additional technical details about CVE-2017-11188 are provided in the connected documents. The supplied sources do not specify affected products, versions, or fixes beyond the initial description; monitor for updates.
CVE-2017-11188: Excessive Iteration
The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check...
CVE-2017-11170: Missing Release of Resource after Effective Lifetime
The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or VST file...
CVE-2017-11166
The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length number of color-map entries field in the header of an XWD file...
CVE-2017-11166
CVE-2017-11166 is an ImageMagick memory-leak vulnerability: the ReadXWDImage function in coders/xwd.c can exhaust memory when processing a crafted XWD header’s color-map length. Reported for ImageMagick 7.0.5-6, the issue is a memory leak in ReadXWDImage that leads to memory exhaustion, with CVSS...
Double free
GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...
CVE-2017-11139
GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...
CVE-2017-11139
GraphicsMagick 1.3.26 contains a double-free vulnerability in ReadOneJNGImage() (coders/png.c), tracked as CVE-2017-11139. Connected advisories indicate multiple distributions published fixes; e.g., Debian/DSA-4321-1 and Fedora advisories include GraphicsMagick updates to 1.3.28+ to address this ...
CVE-2017-11141
Technical details are not provided in the supplied documents for CVE-2017-11141. The description notes a memory leak in ImageMagick ReadMATImage parsing MAT files. No vendor, version, or remediation specifics are included; monitor for updates.
CVE-2017-11139
GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...
CVE-2017-11139
GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...
CVE-2017-11139
GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...
CVE-2017-11166: Missing Release of Resource after Effective Lifetime
The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length number of color-map entries field in the header of an XWD file...
CVE-2017-11141: Missing Release of Resource after Effective Lifetime
The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted MAT file, related to incorrect ordering of a SetImageExtent call...