Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks through a buffer overflow and other attacks. This is caused by a flaw in the WritePDBImage function in coders/pdb.c and can be triggered using an image file...

Memory Leak

ImageMagick is vulnerable to memory leaks. It is caused by the ReadPSDLayers function in coders/psd.c, and can be exploited using image files...

CVE-2017-5511: Improper Restriction of Operations within the Bounds of a Memory Buffer

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow...

CVE-2017-5510: Out-of-bounds Write

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write...

CVE-2016-10144: Improper Access Control

coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check...

CVE-2017-5509: Out-of-bounds Write

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write...

CVE-2016-10145: Undefined Security Weakness

Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy...

CVE-2017-5507: Missing Release of Resource after Effective Lifetime

Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service memory consumption via vectors involving a pixel cache...

PT-2017-16548

Name of the Vulnerable Software and Affected Versions ImageMagick affected versions not specified Description The issue allows remote attackers to have an unspecified impact via a crafted PSD file, which triggers an out-of-bounds write. This is related to the coders/psd.c component in ImageMagick...

CVE-2016-10058

Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick before 6.9.6-3 allows remote attackers to cause a denial of service memory consumption via a crafted image file...

CVE-2016-10053

CVE-2016-10053 affects ImageMagick (before 6.9.5-8). The WriteTIFFImage function in coders/tiff.c can be triggered by a crafted TIFF file to cause a denial of service via a divide-by-zero error, crashing the application. Root cause is division by zero in TIFF handling leading to an unhandled exce...

CVE-2016-10052

Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before 6.9.5-6 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...

CVE-2016-10057

Buffer overflow in the WriteGROUP4Image function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...

CVE-2016-10055

Buffer overflow in the WritePDBImage function in coders/pdb.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...

CVE-2016-10059

Buffer overflow in coders/tiff.c in ImageMagick before 6.9.4-1 allows remote attackers to cause a denial of service application crash or have unspecified other impact via a crafted TIFF file...

CVE-2016-10057

Buffer overflow in the WriteGROUP4Image function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...

CVE-2016-10051

Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...

CVE-2016-10049

CVE-2016-10049 is a buffer overflow in ImageMagick’s ReadRLEImage (coders/rle.c) prior to 6.9.4-4. A crafted RLE file can cause a denial of service (application crash) or other unspecified impact via remote input. The connected Red Hat advisory for RHEL7 lists this CVE among unpatched vulnerabili...

CVE-2016-10054

Buffer overflow in the WriteMAPImage function in coders/map.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...

CVE-2016-10052: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before 6.9.5-6 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...