Skip to main content

Vendor archive

imagemagick CVEs

Beta · best-effort

801 CVEs tagged to vendor imagemagick41 Critical, 210 High, 512 Medium, 38 Low, 0 Unrated.

CVE-2017-11170

Published Jul 11, 2017

The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2017-11166

Published Jul 10, 2017

The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of color-map entries…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-11141

Published Jul 10, 2017

The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted MAT file, related to incorrect orde…

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-10995

Published Jul 7, 2017

The mng_get_long function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a cra…

CVSS 5.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-10928

Published Jul 5, 2017

In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possib…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort

CVE-2017-9501

Published Jun 7, 2017

In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-9500

Published Jun 7, 2017

In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted file.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-9499

Published Jun 7, 2017

In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function SetPixelChannelAttributes, which allows attackers to cause a denial of service via a crafted file.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-9440

Published Jun 5, 2017

In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers to cause a denial of service via a crafted file.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-9439

Published Jun 5, 2017

In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service via a crafted file.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-9409

Published Jun 2, 2017

In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-9407

Published Jun 2, 2017

In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-9405

Published Jun 2, 2017

In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-9262

Published May 29, 2017

In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-9261

Published May 29, 2017

In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-8830

Published May 8, 2017

In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort

CVE-2017-8765

Published May 4, 2017

The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file.

CVSS 6.5 · Medium
Vendor/product tagsBeta · best-effort
Showing 551-575 of 801 CVEsPage 23 of 33