Imagemagick
Page 5 of 7 — Imagemagick CVEs from a corpus of 615, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-17914 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (Re… |
CVE-2017-17887 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a deni… |
CVE-2017-17886 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial… |
CVE-2017-17885 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of… |
CVE-2017-17884 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial o… |
CVE-2017-17883 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which allows attackers to cause a denial of se… |
CVE-2017-17882 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of se… |
CVE-2017-17881 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of se… |
CVE-2017-17880 | High | 8.8 | 2017-12-27 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSIO… |
CVE-2017-17879 | High | 8.8 | 2017-12-27 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and cau… |
CVE-2017-17682 | Medium | 6.5 | 2017-12-14 | In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial o… |
CVE-2017-17681 | Medium | 6.5 | 2017-12-14 | In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a deni… |
CVE-2017-17680 | Medium | 6.5 | 2017-12-14 | In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of se… |
CVE-2017-17504 | Medium | 6.5 | 2017-12-11 | ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage. |
CVE-2017-17499 | Critical | 9.8 | 2017-12-11 | ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp. |
CVE-2017-16546 | High | 8.8 | 2017-11-05 | The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers… |
CVE-2017-15281 | High | 8.8 | 2017-10-12 | ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other… |
CVE-2017-15277 | Medium | 6.5 | 2017-10-12 | ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a gl… |
CVE-2017-15218 | Medium | 6.5 | 2017-10-10 | ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c. |
CVE-2017-15217 | Medium | 6.5 | 2017-10-10 | ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c. |
CVE-2017-15033 | High | 7.5 | 2017-10-05 | ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c. |
CVE-2017-15032 | Critical | 9.8 | 2017-10-05 | ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c. |
CVE-2017-15017 | High | 8.8 | 2017-10-05 | ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c. |
CVE-2017-15016 | High | 8.8 | 2017-10-05 | ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c. |
CVE-2017-15015 | High | 8.8 | 2017-10-05 | ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c. |
CVE-2017-14989 | Medium | 6.5 | 2017-10-03 | A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, becau… |
CVE-2017-14741 | Medium | 6.5 | 2017-09-26 | The ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers to cause a denial of service (infinite loop) via a crafted fon… |
CVE-2017-14739 | High | 7.5 | 2017-09-26 | The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attack… |
CVE-2017-14684 | Medium | 6.5 | 2017-09-22 | In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of s… |
CVE-2017-14682 | High | 8.8 | 2017-09-21 | GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash)… |
CVE-2017-14626 | Critical | 9.8 | 2017-09-21 | ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c. |
CVE-2017-14625 | Critical | 9.8 | 2017-09-21 | ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c. |
CVE-2017-14624 | Critical | 9.8 | 2017-09-21 | ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c. |
CVE-2017-14607 | High | 8.1 | 2017-09-20 | In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this fla… |
CVE-2017-14533 | Medium | 6.5 | 2017-09-18 | ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c. |
CVE-2017-14532 | Critical | 9.8 | 2017-09-18 | ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c. |
CVE-2017-14531 | Medium | 6.5 | 2017-09-18 | ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c. |
CVE-2017-14528 | Medium | 6.5 | 2017-09-18 | The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data… |
CVE-2017-14505 | Medium | 6.5 | 2017-09-17 | DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL arrays, which allows attackers to perform Denial of Service (NULL… |
CVE-2017-14400 | Medium | 6.5 | 2017-09-12 | In ImageMagick 7.0.7-1 Q16, the PersistPixelCache function in magick/cache.c mishandles the pixel cache nexus, which allows remote attackers to cause a denial… |
CVE-2017-14343 | Medium | 6.5 | 2017-09-12 | ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file. |
CVE-2017-14342 | Medium | 6.5 | 2017-09-12 | ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file. |
CVE-2017-14341 | Medium | 6.5 | 2017-09-12 | ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file. |
CVE-2017-14326 | Medium | 6.5 | 2017-09-12 | In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of ser… |
CVE-2017-14325 | Medium | 6.5 | 2017-09-12 | In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to cause a denial… |
CVE-2017-14324 | Medium | 6.5 | 2017-09-12 | In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of ser… |
CVE-2017-14249 | Medium | 6.5 | 2017-09-11 | ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allo… |
CVE-2017-14248 | Medium | 6.5 | 2017-09-11 | A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a cra… |
CVE-2017-14224 | High | 8.8 | 2017-09-09 | A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution… |
CVE-2017-14175 | Medium | 6.5 | 2017-09-07 | In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted… |
CVE-2017-14174 | Medium | 6.5 | 2017-09-07 | In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a… |
CVE-2017-14173 | Medium | 6.5 | 2017-09-07 | In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRange(depth)+1" w… |
CVE-2017-14172 | Medium | 6.5 | 2017-09-07 | In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PS… |
CVE-2017-14139 | Medium | 6.5 | 2017-09-04 | ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c. |
CVE-2017-14138 | Critical | 9.8 | 2017-09-04 | ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP… |
CVE-2017-14137 | High | 7.5 | 2017-09-04 | ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header. |
CVE-2017-12693 | Medium | 6.5 | 2017-09-01 | The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted BMP fi… |
CVE-2017-12692 | Medium | 6.5 | 2017-09-01 | The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted VIFF… |
CVE-2017-12691 | Medium | 6.5 | 2017-09-01 | The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file. |
CVE-2017-14060 | Medium | 6.5 | 2017-08-31 | In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denia… |
CVE-2017-13769 | Medium | 6.5 | 2017-08-30 | The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service (buffer over-read) by se… |
CVE-2017-13768 | Medium | 6.5 | 2017-08-30 | Null Pointer Dereference in the IdentifyImage function in MagickCore/identify.c in ImageMagick through 7.0.6-10 allows an attacker to perform denial of service… |
CVE-2017-13758 | Medium | 6.5 | 2017-08-29 | In ImageMagick 7.0.6-10, there is a heap-based buffer overflow in the TracePoint() function in MagickCore/draw.c. |
CVE-2017-12875 | Medium | 6.5 | 2017-08-29 | The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (CPU consumption) via a crafted file. |
CVE-2017-12877 | Medium | 6.5 | 2017-08-28 | Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a c… |
CVE-2017-12876 | Medium | 6.5 | 2017-08-28 | Heap-based buffer overflow in enhance.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file. |
CVE-2017-13658 | Medium | 6.5 | 2017-08-24 | In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of servic… |
CVE-2017-13146 | High | 8.8 | 2017-08-23 | In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c. |
CVE-2017-13145 | Medium | 6.5 | 2017-08-23 | In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a c… |
CVE-2017-13144 | Medium | 6.5 | 2017-08-23 | In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit" error report) if the image dimensions are too large, as demonst… |
CVE-2017-13143 | High | 7.5 | 2017-08-23 | In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to… |
CVE-2017-13142 | Medium | 6.5 | 2017-08-23 | In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files. |
CVE-2017-13141 | Medium | 6.5 | 2017-08-23 | In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c. |
CVE-2017-13140 | Medium | 6.5 | 2017-08-23 | In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service (applic… |
CVE-2017-13139 | Critical | 9.8 | 2017-08-23 | In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk. |
CVE-2017-13134 | Medium | 6.5 | 2017-08-23 | In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to ca… |
CVE-2017-13133 | Medium | 6.5 | 2017-08-23 | In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory… |
CVE-2017-13132 | Medium | 6.5 | 2017-08-23 | In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor packets" step… |
CVE-2017-13131 | Medium | 6.5 | 2017-08-23 | In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of servi… |
CVE-2017-13062 | Medium | 6.5 | 2017-08-22 | In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service… |
CVE-2017-13061 | Medium | 6.5 | 2017-08-22 | In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a de… |
CVE-2017-13060 | Medium | 6.5 | 2017-08-22 | In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service… |
CVE-2017-13059 | Medium | 6.5 | 2017-08-22 | In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of ser… |
CVE-2017-13058 | Medium | 6.5 | 2017-08-22 | In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allows attackers to cause a denial of servic… |
CVE-2017-12983 | High | 8.8 | 2017-08-21 | Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (applicatio… |
CVE-2017-12676 | Medium | 6.5 | 2017-08-07 | In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of serv… |
CVE-2017-12675 | Medium | 6.5 | 2017-08-07 | In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/c… |
CVE-2017-12674 | Medium | 6.5 | 2017-08-07 | In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of serv… |
CVE-2017-12673 | Medium | 6.5 | 2017-08-07 | In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of serv… |
CVE-2017-12672 | Medium | 6.5 | 2017-08-07 | In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service. |
CVE-2017-12671 | Medium | 6.5 | 2017-08-07 | In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/me… |
CVE-2017-12670 | Medium | 6.5 | 2017-08-07 | In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in MagickCore/image.c, which… |
CVE-2017-12669 | High | 8.8 | 2017-08-07 | ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteCALSImage in coders/cals.c. |
CVE-2017-12668 | High | 8.8 | 2017-08-07 | ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePCXImage in coders/pcx.c. |
CVE-2017-12667 | High | 8.8 | 2017-08-07 | ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders\mat.c. |
CVE-2017-12666 | High | 8.8 | 2017-08-07 | ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteINLINEImage in coders/inline.c. |
CVE-2017-12665 | High | 8.8 | 2017-08-07 | ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c. |
CVE-2017-12664 | High | 8.8 | 2017-08-07 | ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c. |
CVE-2017-12663 | High | 8.8 | 2017-08-07 | ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMAPImage in coders/map.c. |
CVE-2017-12662 | High | 8.8 | 2017-08-07 | ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePDFImage in coders/pdf.c. |