CVE-2017-17501

WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file...

CVE-2017-17502

ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17504: Out-of-bounds Read

ImageMagick before 7.0.7-12 has a coders/png.c Magickpngreadrawprofile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage...

CVE-2017-17503: Out-of-bounds Read

ReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a magick/import.c ImportGrayQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17502: Out-of-bounds Read

ReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c ImportCMYKQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17501: Out-of-bounds Read

WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file...

CVE-2017-17500: Out-of-bounds Read

ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file...

CVE-2017-17498: Improper Restriction of Operations within the Bounds of a Memory Buffer

WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service bitstream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

PT-2017-14811

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to a heap-based buffer over-read in the ReadRGBImage function in coders/rgb.c of GraphicsMagick. This occurs via a crafted file, specifically affecting the ImportRGBQuantumType in...

PT-2017-14812

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to a heap-based buffer over-read in the WriteOnePNGImage function, located in the coders/png.c file of GraphicsMagick. This occurs when processing a crafted file. Recommendations F...

PT-2017-14814

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to a heap-based buffer over-read in the ReadGRAYImage function in coders/gray.c of GraphicsMagick. This occurs via a crafted file, specifically affecting the ImportGrayQuantumType ...

PT-2017-14815

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.7-12 Description The issue is related to a heap-based buffer over-read in the coders/png.c file, specifically in the Magick png read raw profile function, which can be triggered by a crafted file. This is also...

PT-2017-4119

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-12 Q16 Description The issue is related to an infinite loop in the ReadPSDChannelZip function in coders/psd.c, which can be exploited by attackers to cause a denial of service CPU exhaustion via a crafted psd image...

PT-2017-4118

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-12 Q16 Description A large loop issue was found in the ExtractPostscript function in the coders/wpg.c component, allowing attackers to cause a denial of service CPU exhaustion via a crafted wpg image file. The...

PT-2017-3593

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.7-12 Q16 Description: A CPU exhaustion issue was found in the ReadDDSInfo function in coders/dds.c, allowing attackers to cause a denial of service. This issue is related to uncontrolled resource consumption, which can...

CVE-2017-16669

coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixelcache.c...

CVE-2017-16669: Improper Restriction of Operations within the Bounds of a Memory Buffer

coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file, related to the AcquireCacheNexus function in magick/pixelcache.c...

CVE-2017-16546

CVE-2017-16546 affects ImageMagick, where the ReadWPGImage function (coders/wpg.c) does not validate the colormap index in a WPG palette. This can enable an attacker to cause a denial of service by processing a malformed WPG file (potential use of uninitialized data or invalid memory allocation)....

CVE-2017-16545

The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a denial of service ImportIndexQuantumType invalid write and application crash or possibly have unspecified other impact via a malformed WPG ima...

CVE-2017-16546: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service use of uninitialized data or invalid memory allocation or possibly have unspecified other impact via a...