CVE-2017-11535: Out-of-bounds Read

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage function in coders/ps.c...

CVE-2017-11525: Allocation of Resources Without Limits or Throttling

The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service memory consumption via a crafted file...

CVE-2017-11532: Missing Release of Resource after Effective Lifetime

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteMPCImage function in coders/mpc.c...

CVE-2017-11538: Missing Release of Resource after Effective Lifetime

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteOnePNGImage function in coders/png.c...

CVE-2017-11540: Out-of-bounds Read

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex function, called from the WritePICONImage function in coders/xpm.c...

CVE-2017-11536: Missing Release of Resource after Effective Lifetime

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteJP2Image function in coders/jp2.c...

CVE-2017-11534: Missing Release of Resource after Effective Lifetime

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the litefontmap function in coders/wmf.c...

PT-2017-2609

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-2 Description A CPU exhaustion issue was found in the ReadPDBImage function in coders/pdb.c, allowing attackers to cause a denial of service. This can be exploited by a remote attacker to disrupt service...

CVE-2017-11527: Uncontrolled Resource Consumption

The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service memory consumption via a crafted file...

CVE-2017-11539: Missing Release of Resource after Effective Lifetime

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadOnePNGImage function in coders/png.c...

CVE-2017-11528: Missing Release of Resource after Effective Lifetime

The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service memory leak via a crafted file...

CVE-2017-11533

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage function in coders/uil.c...

CVE-2017-11522: NULL Pointer Dereference

The WriteOnePNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file...

CVE-2017-11535

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage function in coders/ps.c...

CVE-2017-11360

The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge numberpixels value...

CVE-2017-11449

coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via an image received from stdin...

Design/Logic Flaw

The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service large loop and CPU consumption via a malformed JNG file...

CVE-2017-11447

The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory leaks, causing denial of service...

CVE-2017-11449

coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via an image received from stdin...

CVE-2017-11446

CVE-2017-11446 : In ImageMagick 7.0.6-1, the ReadPESImage routine (coders/pes.c) contains an infinite loop vulnerability when processing crafted PES files, leading to CPU exhaustion of the host. The impact is described as a denial of service via resource exhaustion; no other exploit paths are sta...