2502 matches found
CVE-2017-9142: Improper Input Validation
In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c...
PT-2017-18725
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.5-5 Description The issue allows attackers to cause a denial of service, specifically a memory leak, by utilizing a crafted .art file. This is due to a problem in the ReadARTImage function located in coders/art.c...
PT-2017-18726
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.5-5 Description A crafted RLE image can cause a crash in ImageMagick due to incorrect EOF handling in the coders/rle.c file. Recommendations For ImageMagick version 7.0.5-5, consider updating to a newer version that...
CVE-2017-9098
ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...
CVE-2017-9098
ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...
CVE-2017-9098: Use of Uninitialized Resource
ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image da...
CVE-2017-8765
The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file...
CVE-2016-7538
coders/psd.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds write via a crafted file...
CVE-2016-7526
coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds write via a crafted file...
Heap overflow
Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted HDR file...
Out-of-bounds
coders/psd.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted PSD file...
Design/Logic Flaw
coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service CPU consumption via a crafted DDS file...
CVE-2015-8958
coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted SUN file...
CVE-2015-8959
coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service CPU consumption via a crafted DDS file...
CVE-2016-7535
CVE-2016-7535: ImageMagick’s PSD decoder (coders/psd.c) is documented to allow remote attackers to cause a denial of service via a crafted PSD file, by triggering an out-of-bounds write. Connected sources corroborate this CVE as part of a broader set of ImageMagick vulnerabilities; the entries de...
CVE-2016-7520
Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted HDR file...
CVE-2016-7525
Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted PSD file...
CVE-2016-7538
coders/psd.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds write via a crafted file...