CVE-2015-8894

CVE-2015-8894 describes a double-free vulnerability in ImageMagick 7.0.0 and later, occurring in the encoder/tga.c code path. A crafted TGA file can trigger an application crash (DoS). The issue is specified as a vulnerability in coders/tga.c and is not accompanied by details on exploitation vect...

CVE-2015-8895: Integer Overflow or Wraparound

Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service application crash via a crafted length value, which triggers a buffer overflow...

CVE-2015-8896: Undefined Security Weakness

Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service application crash via a crafted .pict file...

CVE-2015-8894: Double Free

Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service application crash via a crafted tga file...

CVE-2017-6335

The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file...

CVE-2017-6335

The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file...

CVE-2017-6335

CVE-2017-6335 is rejected; this entry does not represent an active vulnerability.

CVE-2017-6335: Out-of-bounds Read

The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service out-of-bounds read and application crash via a small samples per pixel value in a CMYKA TIFF file...

ImageMagick Buffer Overflow Vulnerability (CNVD-2017-03038)

ImageMagick is an open source image viewing and editing tool for Unix/Linux platforms. A buffer overflow vulnerability exists in the coders/tiff.c implementation in versions of ImageMagick prior to 6.9.5-1. It is possible for a remote attacker to exploit this vulnerability to cause a denial of...

CVE-2016-10070

Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted mat file...

CVE-2016-10066

CVE-2016-10066 is an ImageMagick vulnerability. A buffer overflow in the ReadVIFFImage function (coders/viff.c) on ImageMagick before 6.9.4-5 allows a remote attacker to crash the application (denial of service) by supplying a crafted VIFF file. The issue stems from a flaw in handling VIFF image ...

CVE-2016-10066: Buffer Copy without Checking Size of Input

Buffer overflow in the ReadVIFFImage function in coders/viff.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service application crash via a crafted file...

CVE-2016-10065: Improper Access Control

The ReadVIFFImage function in coders/viff.c in ImageMagick before 7.0.1-0 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file...

CVE-2016-10061: Unchecked Return Value

The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service crash via a crafted image file...

CVE-2016-10070: Out-of-bounds Read

Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted mat file...

Design/Logic Flaw

coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service application crash via a mat file with an invalid number of frames...

Out-of-bounds

coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted mat file...

CVE-2016-10071

coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted mat file...

CVE-2016-10069

coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service application crash via a mat file with an invalid number of frames...

CVE-2016-10063: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service application crash or have other unspecified impact via a crafted file, related to extend validity...