CVE-2017-11139

GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...

CVE-2017-11166: Missing Release of Resource after Effective Lifetime

The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length number of color-map entries field in the header of an XWD file...

CVE-2017-11141: Missing Release of Resource after Effective Lifetime

The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted MAT file, related to incorrect ordering of a SetImageExtent call...

CVE-2017-11139: Double Free

GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...

PT-2017-3895

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to the handling of JPEG files, which can cause a denial of service due to resource consumption. This can be achieved by remote attackers using crafted JPEG files. The problem is...

PT-2017-2765

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.9-0 ImageMagick versions 7.x prior to 7.0.6-1 Description The issue is related to an out-of-bounds read in the ReadOneMNGImage function, located in coders/png.c. This function is part of the ImageMagick consol...

PT-2017-2610

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-1 Description The issue is related to a memory exhaustion vulnerability in the ReadOneJNGImage function, located in coders/png.c, of the ImageMagick console graphic editor. This vulnerability can be exploited by a...

CVE-2017-11102

The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service application crash during JNG reading via a zero-length colorimage data structure...

CVE-2017-10995

The mnggetlong function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted MNG image...

CVE-2017-10995: Out-of-bounds Read

The mnggetlong function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted MNG image...

PT-2017-3836

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue exists due to insufficient input validation in the ReadOneJNGImage function, located in coders/png.c. This allows a remote attacker to cause a denial of service, resulting in an application...

PT-2017-11669

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted MNG image. This is due to a problem in the mng get long...

PT-2017-2593

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-1 Description The issue is related to a memory exhaustion vulnerability in the ReadMPCImage function, located in coders/mpc.c. This vulnerability can be exploited by a remote attacker to cause a denial of service...

Heap overflow

In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue...

CVE-2017-10928

In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue...

CVE-2017-10928

In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue...

CVE-2017-10928: Out-of-bounds Read

In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue...

PT-2017-2591

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-1 Description A memory exhaustion issue was discovered in the ReadSUNImage function, located in coders/sun.c, allowing attackers to cause a denial of service. This issue can be exploited by a remote attacker to disrup...

CVE-2017-10800

When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service OOM in ReadMATImage if the size specified for a MAT Object is larger than the actual amount of data...

CVE-2017-10800

When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service OOM in ReadMATImage if the size specified for a MAT Object is larger than the actual amount of data...