Lucene search
K

17 matches found

Github Security Blog
Github Security Blog
added 2026/02/24 3:32 p.m.3 views

ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

In ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereference and crash. AddressSanitizer:DEADLYSIGNAL ================================================================= ==1414421==ERROR:...

7.5CVSS5.3AI score0.0002EPSS
Exploits0References6Affected Software18
Vulnrichment
Vulnrichment
added 2026/02/24 12:54 a.m.2 views

CVE-2026-25795 ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

5.3CVSS5.9AI score0.0002EPSS
Exploits0References1
CVE
CVE
added 2026/02/24 12:54 a.m.11 views

CVE-2026-25795

ImageMagick vulnerability CVE-2026-25795 affects the ReadSFWImage() path in coders/sfw.c. When temporary file creation fails, read_info is destroyed before its filename is accessed, causing a NULL pointer dereference and potential crash. Affected versions are prior to 7.1.2-15 and 6.9.13-40; thes...

7.5CVSS5.3AI score0.0002EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/02/24 12:54 a.m.16 views

CVE-2026-25795 ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

5.3CVSS0.0002EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:41 a.m.0 views

SUSE CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

7.5CVSS8.6AI score0.0038EPSS
Exploits0References5
ossfuzz
ossfuzz
added 2018/02/07 9:10 a.m.17 views

graphicsmagick/coder_CUT_fuzzer: Unknown signal in DestroyImageInfo

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4849701372297216 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderCUTfuzzer Fuzz target binary: coderCUTfuzzer Job Type: libfuzzerubsangraphicsmagick Platform Id: linux Crash Type:...

6.7AI score
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2017/08/31 2:48 p.m.28 views

CVE-2017-13658

In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service assertion failure and application exit in the DestroyImageInfo function in MagickCore/image.c...

6.5CVSS3.3AI score0.00475EPSS
Exploits0References1
Veracode
Veracode
added 2017/08/24 6:16 p.m.29 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. These attacks can be conducted because there is a missing NULL check in the ReadMATImage function which leads to an assertion failure and application exit from within the DestroyImageInfo function...

6.5CVSS6.7AI score0.00475EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2017/08/24 6:29 a.m.21 views

CVE-2017-13658

In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service assertion failure and application exit in the DestroyImageInfo function in MagickCore/image.c...

6.5CVSS7.4AI score0.00475EPSS
Exploits0References5
UbuntuCve
UbuntuCve
added 2017/08/24 6:29 a.m.31 views

CVE-2017-13658

In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service assertion failure and application exit in the DestroyImageInfo function in MagickCore/image.c...

6.5CVSS6.8AI score0.00475EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2017/08/24 6:0 a.m.42 views

CVE-2017-13658

In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service assertion failure and application exit in the DestroyImageInfo function in MagickCore/image.c...

6.5CVSS7.3AI score0.00475EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2017/08/04 10:29 a.m.24 views

CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

6.5CVSS6.8AI score0.0038EPSS
Exploits0References1
NVD
NVD
added 2017/08/04 10:29 a.m.17 views

CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

6.5CVSS7.5AI score0.0038EPSS
Exploits0References2
OSV
OSV
added 2017/08/04 10:29 a.m.1 views

UBUNTU-CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

6.5CVSS6.9AI score0.0038EPSS
Exploits0References2
OSV
OSV
added 2017/08/04 10:29 a.m.1 views

DEBIAN-CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

6.5CVSS6.5AI score0.0038EPSS
Exploits0References1
Prion
Prion
added 2017/08/04 10:29 a.m.18 views

Input validation

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

4.3CVSS6.2AI score0.0038EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2017/08/04 10:0 a.m.28 views

CVE-2017-12434

In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service assertion failure in DestroyImageInfo in image.c...

6.5CVSS7.8AI score0.0038EPSS
Exploits0
Rows per page
Query Builder