Lucene search
K

7 matches found

OSV
OSV
added 2026/02/24 12:54 a.m.2 views

CVE-2026-25795 ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

5.3CVSS5.5AI score0.0002EPSS
Exploits0References3
OSV
OSV
added 2018/03/27 3:29 a.m.1 views

DEBIAN-CVE-2017-18251

An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, which allow remote attackers to cause a denial of service via a crafted file...

6.5CVSS8.5AI score0.00302EPSS
Exploits0References1
OSV
OSV
added 2017/08/23 6:29 a.m.1 views

DEBIAN-CVE-2017-13141

In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c...

6.5CVSS6.7AI score0.00426EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2017/08/10 12:0 a.m.3 views

PT-2017-4104 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.6-6 Description: A memory exhaustion issue was found in the ReadTIFFImage function, allowing attackers to cause a denial of service. The vulnerability is related to an error in the resource control mechanism, which can...

9.8CVSS6.5AI score0.87527EPSS
Exploits69References414
Positive Technologies
Positive Technologies
added 2016/08/25 12:0 a.m.1 views

PT-2016-7361 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to cause a denial of service out-of-bounds read via a crafted file. This is due to a problem in the ReadRLEImage function in coders/rle.c...

9.8CVSS7AI score0.2299EPSS
Exploits15References363
Positive Technologies
Positive Technologies
added 2007/11/29 12:0 a.m.1 views

PT-2007-1121 · Cairo +1 · Cairo +1

Name of the Vulnerable Software and Affected Versions: Cairo versions prior to 1.4.12 Description: The issue is related to multiple integer overflows that may allow remote attackers to execute arbitrary code. This can be achieved by using a crafted PNG image with large width and height values,...

6.8CVSS6.8AI score0.10388EPSS
Exploits0References50
Positive Technologies
Positive Technologies
added 1970/01/01 12:0 a.m.2 views

PT-2008-6942 · Tcl/Tk +2 · Tcllib +10

Name of the Vulnerable Software and Affected Versions: Tk versions prior to 8.5.1 tcl-devel versions 8.3.5 and earlier tclx versions 8.3 and earlier tk8.3 versions prior to 8.5.1 tk8.3-dev versions prior to 8.5.1 tcllib versions 1.0 and earlier tcltk versions 8.3.3 and earlier, 8.3.5 and earlier...

7.8CVSS8.5AI score0.08002EPSS
Exploits3References86
Rows per page
Query Builder