CVE-2018-10805

ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c...

ImageMagick memory leak vulnerability (CNVD-2018-10806)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory leak vulnerability exists in ReadYCBCRImage in coders/ycbcr.c in ImageMagick version 7.0.7-28. An attacker can exploit this vulnerability to cause a denial of...

PT-2018-10116

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-28 Description The issue is related to a memory leak in the ReadYCBCRImage function, located in coders/ycbcr.c. Recommendations For ImageMagick version 7.0.7-28, consider updating to a newer version that contains a fi...

CVE-2018-10805

ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c...

CVE-2018-10805: Missing Release of Resource after Effective Lifetime

ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c...

CVE-2018-10804: Missing Release of Resource after Effective Lifetime

ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c...

PT-2018-3691

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.7-29 and earlier Description The issue is related to a null pointer dereference in the ReadOneJNGImage function of the coders/png.c component. This can be exploited by a remote attacker to cause a denial of service,...

CVE-2018-10177

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

PT-2018-3695

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-28 Description The issue is related to an infinite loop in the ReadOneMNGImage function of the coders/png.c file. This allows remote attackers to cause a denial of service via a crafted mng file. The vulnerability can...

CVE-2018-10177: Loop with Unreachable Exit Condition

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

CVE-2018-9135

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. These attacks can be triggered due to a heap-based buffer over-read in the IsWEBPImageLossless function of coders/webp.c...

CVE-2018-9135

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c...

CVE-2018-9135

CVE-2018-9135 : In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless (coders/webp.c). The connected documents confirm this specific faulty code location and description. The reports do not disclose a fixed patch version or mitigation within the provided mater...

CVE-2018-9133

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...

CVE-2018-9135

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c...

CVE-2018-9133

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...

CVE-2018-9135

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c...

PT-2018-3700

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.7-26 Q16 Description The issue is related to excessive iteration in the DecodeLabImage and EncodeLabImage functions of the coders/tiff.c component. This allows a remote attacker to cause a denial of service using a...

PT-2018-18879

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-24 Q16 Description A heap-based buffer over-read issue exists in the IsWEBPImageLossless function in coders/webp.c. Recommendations For ImageMagick version 7.0.7-24 Q16, at the moment, there is no information about a...