Imagemagick
Page 7 of 7 — Imagemagick CVEs from a corpus of 615, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-8346 | Medium | 6.5 | 2017-04-30 | In ImageMagick 7.0.5-5, the ReadDCMImage function in dcm.c allows attackers to cause a denial of service (memory leak) via a crafted file. |
CVE-2017-8345 | Medium | 6.5 | 2017-04-30 | In ImageMagick 7.0.5-5, the ReadMNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file. |
CVE-2017-8344 | Medium | 6.5 | 2017-04-30 | In ImageMagick 7.0.5-5, the ReadPCXImage function in pcx.c allows attackers to cause a denial of service (memory leak) via a crafted file. |
CVE-2017-8343 | Medium | 6.5 | 2017-04-30 | In ImageMagick 7.0.5-5, the ReadAAIImage function in aai.c allows attackers to cause a denial of service (memory leak) via a crafted file. |
CVE-2016-7540 | Medium | 6.5 | 2017-04-20 | coders/rgf.c in ImageMagick before 6.9.4-10 allows remote attackers to cause a denial of service (assertion failure) by converting an image to rgf format. |
CVE-2016-7538 | Medium | 6.5 | 2017-04-20 | coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file. |
CVE-2016-7536 | Medium | 6.5 | 2017-04-20 | magick/profile.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted profile. |
CVE-2016-7535 | Medium | 6.5 | 2017-04-20 | coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PSD file. |
CVE-2016-7534 | Medium | 6.5 | 2017-04-20 | The generic decoder in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted file. |
CVE-2016-7532 | Medium | 6.5 | 2017-04-20 | coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file. |
CVE-2016-7530 | Medium | 6.5 | 2017-04-20 | The quantum handling code in ImageMagick allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds write) via a crafted file. |
CVE-2016-7527 | Medium | 6.5 | 2017-04-20 | coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. |
CVE-2016-7526 | Medium | 6.5 | 2017-04-20 | coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file. |
CVE-2016-7525 | Medium | 6.5 | 2017-04-20 | Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file. |
CVE-2016-7521 | Medium | 6.5 | 2017-04-20 | Heap-based buffer overflow in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD file. |
CVE-2016-7520 | Medium | 6.5 | 2017-04-20 | Heap-based buffer overflow in coders/hdr.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted HDR file. |
CVE-2016-7518 | Medium | 6.5 | 2017-04-20 | The ReadSUNImage function in coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted SUN file. |
CVE-2016-7517 | Medium | 6.5 | 2017-04-20 | The EncodeImage function in coders/pict.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PICT file. |
CVE-2016-7516 | Medium | 6.5 | 2017-04-20 | The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted VIFF file. |
CVE-2016-7514 | Medium | 6.5 | 2017-04-20 | The ReadPSDChannelPixels function in coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD fi… |
CVE-2016-7513 | Medium | 6.5 | 2017-04-20 | Off-by-one error in magick/cache.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors. |
CVE-2016-5010 | Medium | 6.5 | 2017-04-20 | coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF file. |
CVE-2015-8959 | Medium | 6.5 | 2017-04-20 | coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (CPU consumption) via a crafted DDS file. |
CVE-2015-8958 | Medium | 6.5 | 2017-04-20 | coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted S… |
CVE-2015-8957 | Medium | 6.5 | 2017-04-20 | Buffer overflow in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (application crash) via a crafted SUN file. |
CVE-2016-7537 | Medium | 6.5 | 2017-04-19 | MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted PDB file. |
CVE-2016-7533 | Medium | 6.5 | 2017-04-19 | The ReadWPGImage function in coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WPG file. |
CVE-2016-7531 | Medium | 6.5 | 2017-04-19 | MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PDB file. |
CVE-2016-7529 | Medium | 6.5 | 2017-04-19 | coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted XCF file. |
CVE-2016-7528 | Medium | 6.5 | 2017-04-19 | The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted VIFF file. |
CVE-2016-7522 | Medium | 6.5 | 2017-04-19 | The ReadPSDImage function in MagickCore/locale.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PSD fil… |
CVE-2016-7519 | Medium | 6.5 | 2017-04-19 | The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. |
CVE-2016-7515 | Medium | 6.5 | 2017-04-19 | The ReadRLEImage function in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the n… |
CVE-2014-9907 | Medium | 6.5 | 2017-04-19 | coders/dds.c in ImageMagick allows remote attackers to cause a denial of service via a crafted DDS file. |
CVE-2017-7943 | Medium | 6.5 | 2017-04-18 | The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file. |
CVE-2017-7942 | Medium | 6.5 | 2017-04-18 | The ReadAVSImage function in avs.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file. |
CVE-2017-7941 | Medium | 6.5 | 2017-04-18 | The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file. |
CVE-2014-9837 | Medium | 6.5 | 2017-04-11 | coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service (crash) via a crafted png file. |
CVE-2014-8716 | Medium | 6.2 | 2017-04-11 | The JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service (out-of-bounds memory access and crash). |
CVE-2014-8562 | Medium | 5.5 | 2017-04-11 | DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read). |
CVE-2014-8355 | Medium | 5.5 | 2017-04-11 | PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read). |
CVE-2014-8354 | Medium | 6.5 | 2017-04-11 | The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted… |
CVE-2017-7619 | High | 7.5 | 2017-04-10 | In ImageMagick 7.0.4-9, an infinite loop can occur because of a floating-point rounding error in some of the color algorithms. This affects ModulateHSL, Modula… |
CVE-2017-7606 | Medium | 6.5 | 2017-04-09 | coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote… |
CVE-2014-9829 | Medium | 6.5 | 2017-04-05 | coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted sun file. |
CVE-2014-9826 | Critical | 9.8 | 2017-03-30 | ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files. |
CVE-2014-9825 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-98… |
CVE-2014-9824 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-98… |
CVE-2014-9823 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9… |
CVE-2014-9822 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file. |
CVE-2014-9821 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file. |
CVE-2014-9820 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file. |
CVE-2014-9819 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a different vulnerability than CVE-2014-9… |
CVE-2014-9818 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file. |
CVE-2014-9817 | High | 7.8 | 2017-03-30 | Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file. |
CVE-2014-9816 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file. |
CVE-2014-9815 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted wpg file. |
CVE-2014-9814 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted wpg file. |
CVE-2014-9813 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file. |
CVE-2014-9812 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ps file. |
CVE-2014-9811 | Medium | 5.5 | 2017-03-30 | The xwd file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a malformed xwd file. |
CVE-2014-9810 | Medium | 5.5 | 2017-03-30 | The dpx file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a malformed dpx file. |
CVE-2014-9809 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted xwd image. |
CVE-2014-9808 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted dpc image. |
CVE-2014-9807 | Medium | 5.5 | 2017-03-30 | The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors. |
CVE-2014-9806 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file. |
CVE-2014-9805 | Medium | 5.5 | 2017-03-30 | ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted pnm file. |
CVE-2014-9804 | High | 7.5 | 2017-03-30 | vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via vectors related to "too many object." |
CVE-2017-7275 | Medium | 5.5 | 2017-03-27 | The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and ap… |
CVE-2017-5511 | Critical | 9.8 | 2017-03-24 | coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow. |
CVE-2017-5510 | High | 7.8 | 2017-03-24 | coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write. |
CVE-2017-5509 | High | 7.8 | 2017-03-24 | coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write. |
CVE-2017-5508 | Medium | 5.5 | 2017-03-24 | Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of s… |
CVE-2017-5507 | High | 7.5 | 2017-03-24 | Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service (memory consumption) via… |
CVE-2017-5506 | High | 7.8 | 2017-03-24 | Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file. |
CVE-2016-10146 | High | 7.5 | 2017-03-24 | Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service (memory consumption) via unspec… |
CVE-2016-10145 | Critical | 9.8 | 2017-03-24 | Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy. |
CVE-2016-10144 | Critical | 9.8 | 2017-03-24 | coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check. |
CVE-2016-9556 | Medium | 5.5 | 2017-03-23 | The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) v… |
CVE-2016-10059 | High | 7.8 | 2017-03-23 | Buffer overflow in coders/tiff.c in ImageMagick before 6.9.4-1 allows remote attackers to cause a denial of service (application crash) or have unspecified oth… |
CVE-2016-10058 | Medium | 5.5 | 2017-03-23 | Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick before 6.9.6-3 allows remote attackers to cause a denial of service (memory consumptio… |
CVE-2016-10057 | High | 7.8 | 2017-03-23 | Buffer overflow in the WriteGROUP4Image function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (applicati… |
CVE-2016-10056 | High | 7.8 | 2017-03-23 | Buffer overflow in the sixel_decode function in coders/sixel.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application… |
CVE-2016-10055 | High | 7.8 | 2017-03-23 | Buffer overflow in the WritePDBImage function in coders/pdb.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application c… |
CVE-2016-10054 | High | 7.8 | 2017-03-23 | Buffer overflow in the WriteMAPImage function in coders/map.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application c… |
CVE-2016-10053 | Medium | 5.5 | 2017-03-23 | The WriteTIFFImage function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (divide-by-zero error and appli… |
CVE-2016-10052 | High | 7.8 | 2017-03-23 | Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before 6.9.5-6 allows remote attackers to cause a denial of service (application c… |
CVE-2016-10051 | High | 7.8 | 2017-03-23 | Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (applicat… |
CVE-2016-10050 | High | 7.8 | 2017-03-23 | Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (applicatio… |
CVE-2016-10049 | High | 7.8 | 2017-03-23 | Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick before 6.9.4-4 allows remote attackers to cause a denial of service (application cr… |
CVE-2016-10048 | High | 7.5 | 2017-03-23 | Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors. |
CVE-2016-10047 | Medium | 5.5 | 2017-03-23 | Memory leak in the NewXMLTree function in magick/xml-tree.c in ImageMagick before 6.9.4-7 allows remote attackers to cause a denial of service (memory consumpt… |
CVE-2016-10046 | Medium | 5.5 | 2017-03-23 | Heap-based buffer overflow in the DrawImage function in magick/draw.c in ImageMagick before 6.9.5-5 allows remote attackers to cause a denial of service (appli… |
CVE-2014-9915 | Medium | 5.5 | 2017-03-23 | Off-by-one error in ImageMagick before 6.6.0-4 allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM profile. |
CVE-2014-9840 | Medium | 5.5 | 2017-03-22 | ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file. |
CVE-2014-9839 | High | 7.5 | 2017-03-22 | magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access). |
CVE-2014-9838 | Medium | 5.5 | 2017-03-22 | magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash). |
CVE-2014-9836 | Medium | 5.5 | 2017-03-22 | ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file. |
CVE-2014-9835 | High | 7.8 | 2017-03-22 | Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file. |
CVE-2014-9834 | High | 7.8 | 2017-03-22 | Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file. |