CVE-2017-14137

CVE-2017-14137 affects ImageMagick 7.0.6-5, where ReadWEBPImage (coders/webp.c) allocates memory based solely on a header length field, causing excessive memory allocation. This can lead to memory exhaustion/DoS. The incident is documented with this exact technical detail; no fix/version or remed...

CVE-2017-14139

CVE-2017-14139 is tied to ImageMagick 7.0.6-2 and a memory leak in WriteMSLImage (coders/msl.c). Connected sources confirm the affected component is the MSL image writer, but do not provide further technical details beyond the location of the leak. The other references associate ImageMagick packa...

CVE-2017-14139

ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c...

CVE-2017-14138

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. The attacks can be launched because the ReadVIFFImage function in coders/viff.c does not properly handle malicious VIFF files, causing memory consumption...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. When attackers input malicious image files, it causes a NULL pointer dereference issue in the ReadCUTImage function in coders/cut.c...

CVE-2017-12691

CVE-2017-12691 is rejected and does not represent an active vulnerability entry.

CVE-2017-12691

The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted file...

CVE-2017-12693

CVE-2017-12693 – ImageMagick’s ReadBMPImage (coders/bmp.c) in version 7.0.6-6 and earlier allows remote attackers to cause a denial of service via a crafted BMP file by triggering memory consumption. The connected Nessus entry corroborates the issue and indicates affected 7.0.6-6 timeframe. No re...

CVE-2017-14103

The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain error conditions, which allows remote attackers to conduct use-after-free attacks via a crafted file, related to a ReadMNGImage out-of-order CloseBlob call...

Debian DLA-1082-1 : graphicsmagick security update

CVE-2017-13776 CVE-2017-13777 denial of service issue in ReadXBMImage CVE-2017-12935 The ReadMNGImage function in coders/png.c mishandles large MNG images, leading to an invalid memory read in the SetImageColorCallBack function in magick/image.c. CVE-2017-12936 The ReadWMFImage function in...

CVE-2017-14060

In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denial of Service in the QueueAuthenticPixelCacheNexus function within the MagickCore/cache.c file by submitting a malformed image file...

GraphicsMagick Denial of Service Vulnerability (CNVD-2017-24318)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A denial of service vulnerability exists in the 'ReadXBMImage' function in the coders/xbm.c file in GraphicsMagick version 1.3.26. An attacker can exploit th...

CVE-2017-14060

In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denial of Service in the QueueAuthenticPixelCacheNexus function within the MagickCore/cache.c file by submitting a malformed image file...

CVE-2017-13145

In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash...

CVE-2017-13146

In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c...

CVE-2017-13141

In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c...

Design/Logic Flaw

GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests...

CVE-2017-13775

GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself does not support the requests...

Design/Logic Flaw

GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would cause large amounts of CPU and memory consumption although the crafted file itself does not request it...