CVE-2017-11141

Technical details are not provided in the supplied documents for CVE-2017-11141. The description notes a memory leak in ImageMagick ReadMATImage parsing MAT files. No vendor, version, or remediation specifics are included; monitor for updates.

CVE-2017-11139

GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...

CVE-2017-11139

GraphicsMagick 1.3.26 contains a double-free vulnerability in ReadOneJNGImage() (coders/png.c), tracked as CVE-2017-11139. Connected advisories indicate multiple distributions published fixes; e.g., Debian/DSA-4321-1 and Fedora advisories include GraphicsMagick updates to 1.3.28+ to address this ...

CVE-2017-11139

GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...

CVE-2017-11139

GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...

CVE-2017-11139: Double Free

GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage function in coders/png.c...

PT-2017-2765

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.9-0 ImageMagick versions 7.x prior to 7.0.6-1 Description The issue is related to an out-of-bounds read in the ReadOneMNGImage function, located in coders/png.c. This function is part of the ImageMagick consol...

CVE-2017-11141: Missing Release of Resource after Effective Lifetime

The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted MAT file, related to incorrect ordering of a SetImageExtent call...

PT-2017-3895

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue is related to the handling of JPEG files, which can cause a denial of service due to resource consumption. This can be achieved by remote attackers using crafted JPEG files. The problem is...

CVE-2017-11166: Missing Release of Resource after Effective Lifetime

The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length number of color-map entries field in the header of an XWD file...

PT-2017-2610

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-1 Description The issue is related to a memory exhaustion vulnerability in the ReadOneJNGImage function, located in coders/png.c, of the ImageMagick console graphic editor. This vulnerability can be exploited by a...

CVE-2017-11102

The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service application crash during JNG reading via a zero-length colorimage data structure...

CVE-2017-10995

The mnggetlong function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted MNG image...

PT-2017-11669

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted MNG image. This is due to a problem in the mng get long...

CVE-2017-10995: Out-of-bounds Read

The mnggetlong function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted MNG image...

PT-2017-3836

Name of the Vulnerable Software and Affected Versions GraphicsMagick version 1.3.26 Description The issue exists due to insufficient input validation in the ReadOneJNGImage function, located in coders/png.c. This allows a remote attacker to cause a denial of service, resulting in an application...

PT-2017-2593

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-1 Description The issue is related to a memory exhaustion vulnerability in the ReadMPCImage function, located in coders/mpc.c. This vulnerability can be exploited by a remote attacker to cause a denial of service...

Heap overflow

In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue...

CVE-2017-10928

In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue...

CVE-2017-10928: Out-of-bounds Read

In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue...