628 matches found
ImageMagick memory leak vulnerability (CNVD-2018-00098)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory leak vulnerability exists in the ReadPICTImage function in coders/pict.c in ImageMagick version 7.0.7-12 Q16. An attacker can exploit this vulnerability to...
CVE-2017-17883
ImageMagick 7.0.7-12 Q16 is affected by a memory-leak vulnerability in ReadPGXImage (coders/pgx.c) that can cause denial of service via a crafted PGX image file. The issue is documented across multiple sources (SUSE, Red Hat, Ubuntu and OSV/NVD mirrors). No public exploitation details or remediat...
CVE-2017-17884
In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability is present in the PNG coder function WriteOnePNGImage (coders/png.c) that can cause a denial of service via a crafted PNG image. The CVE entry provides this concrete detail and does not list an available fix in the supplied documents. Pract...
CVE-2017-17887
CVE-2017-17887 affects ImageMagick 7.0.7-16 Q16. A memory leak in GetImagePixelCache (magick/cache.c) can be triggered by processing a crafted MNG image via ReadOneMNGImage, potentially leading to denial of service. No remediation or patch details are provided in the supplied documents.
CVE-2017-17882
Technical details (affected versions, root cause, exploit information, and patch status) for CVE-2017-17882 are not provided in the connected documents. Monitor for updates.
CVE-2017-17886
ImageMagick 7.0.7-12 Q16 (ReadPSDChannelZip in coders/psd.c) contains a memory-leak vulnerability that can be exploited to cause a denial of service via a crafted PSD image. The description explicitly ties this CVE-2017-17886 to a PSD parsing path in ReadPSDChannelZip, leading to resource exhaust...
CVE-2017-17680
CVE-2017-17680 affects ImageMagick 7.0.7-12 Q16; memory leak in ReadXPMImage (coders/xpm.c) can cause denial of service via a crafted XPM image. No exploitation details or patched version are provided in the supplied documents; remediation not specified.
CVE-2017-17680: Missing Release of Resource after Effective Lifetime
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file...
CVE-2017-15017
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c...
CVE-2017-14684
In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service memory consumption in ResizeMagickMemory in MagickCore/memory.c via a crafted file...
CVE-2017-15017
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c...
CVE-2017-15017
CVE-2017-15017: ImageMagick 7.0.7-0 Q16 is affected by a NULL pointer dereference in ReadOneMNGImage (coders/png.c). The connected Nessus entry notes a lack of vendor patch for this unpatched version (ImageMagick 7.0.7-0 Q16). No further technical details or remediation are provided in the docume...
CVE-2017-15015
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c...
CVE-2017-14624
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c...
CVE-2017-14684
In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service memory consumption in ResizeMagickMemory in MagickCore/memory.c via a crafted file...
Out-of-bounds
In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...
CVE-2017-14326
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file...
Heap overflow
A heap-based buffer over-read in SampleImage in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file...
CVE-2017-14175
In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage due to lack of an EOF End of File check might cause huge CPU consumption. When a crafted XBM file, which claims large rows and columns fields in the header but does not contain sufficient backing data, is provided, the loop over th...