CVE-2017-10928: Out-of-bounds Read

In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue...

CVE-2017-10928

In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue...

CVE-2017-10800

When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service OOM in ReadMATImage if the size specified for a MAT Object is larger than the actual amount of data...

CVE-2017-10800

When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service OOM in ReadMATImage if the size specified for a MAT Object is larger than the actual amount of data...

CVE-2017-10799: Uncontrolled Resource Consumption

When GraphicsMagick 1.3.25 processes a DPX image with metadata indicating a large width in coders/dpx.c, a denial of service OOM can occur in ReadDPXImage...

CVE-2017-10800: Uncontrolled Resource Consumption

When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service OOM in ReadMATImage if the size specified for a MAT Object is larger than the actual amount of data...

Buffer overflow

When GraphicsMagick 1.3.25 processes an RGB TIFF picture with metadata indicating a single sample per pixel in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode...

CVE-2017-10794

When GraphicsMagick 1.3.25 processes an RGB TIFF picture with metadata indicating a single sample per pixel in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode...

CVE-2017-10794: Improper Restriction of Operations within the Bounds of a Memory Buffer

When GraphicsMagick 1.3.25 processes an RGB TIFF picture with metadata indicating a single sample per pixel in coders/tiff.c, a buffer overflow occurs, related to QuantumTransferMode...

The vulnerability of the coders/wpg.c component in the console-based image editing tool ImageMagick allows a hacker to exert undefined effects.

The vulnerability of the coders/wpg.c component in the console-based image editing tool ImageMagick is caused by an unaccounted-for unit. Exploiting this vulnerability can allow a remote attacker to exert unpredictable effects using vectors related to the copy of the string...

The vulnerability of the coders/ipl.c component in the console-based graphic editor ImageMagick, which allows a hacker to exert undefined effects.

The vulnerability of the coders/ipl.c component in the console-based graphic editor ImageMagick is related to the lack of proper checking for the malloc function. Exploiting this vulnerability allows a remote attacker to cause unpredictable effects...

Memory corruption

In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers to cause a denial of service via a crafted file...

Denial Of Service (DoS) Through Memory Leak

ImageMagick is vulnerable to denial of service DoS attacks. These attacks are possible due to a flaw in coders/icon.c that causes a memory leak...

CVE-2017-9439: Missing Release of Resource after Effective Lifetime

In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-9440: Missing Release of Resource after Effective Lifetime

In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers to cause a denial of service via a crafted file...

Memory corruption

In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service memory leak via a crafted file...

CVE-2017-9262

In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service memory leak via a crafted file...

CVE-2017-9261: Missing Release of Resource after Effective Lifetime

In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service memory leak via a crafted file...

CVE-2017-9262: Missing Release of Resource after Effective Lifetime

In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service memory leak via a crafted file...

CVE-2017-9141

In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function in MagickCore/profile.c because of missing checks in the ReadDDSImage function in coders/dds.c...