Imagemagick
Page 8 of 9 — Imagemagick CVEs from a corpus of 830, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-10050 | High | 7.8 | 2017-03-23 | Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (applicatio… |
CVE-2016-10049 | High | 7.8 | 2017-03-23 | Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick before 6.9.4-4 allows remote attackers to cause a denial of service (application cr… |
CVE-2016-10048 | High | 7.5 | 2017-03-23 | Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors. |
CVE-2016-10047 | Medium | 5.5 | 2017-03-23 | Memory leak in the NewXMLTree function in magick/xml-tree.c in ImageMagick before 6.9.4-7 allows remote attackers to cause a denial of service (memory consumpt… |
CVE-2016-10046 | Medium | 5.5 | 2017-03-23 | Heap-based buffer overflow in the DrawImage function in magick/draw.c in ImageMagick before 6.9.5-5 allows remote attackers to cause a denial of service (appli… |
CVE-2014-9915 | Medium | 5.5 | 2017-03-23 | Off-by-one error in ImageMagick before 6.6.0-4 allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM profile. |
CVE-2014-9840 | Medium | 5.5 | 2017-03-22 | ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file. |
CVE-2014-9839 | High | 7.5 | 2017-03-22 | magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access). |
CVE-2014-9838 | Medium | 5.5 | 2017-03-22 | magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash). |
CVE-2014-9836 | Medium | 5.5 | 2017-03-22 | ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file. |
CVE-2014-9835 | High | 7.8 | 2017-03-22 | Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file. |
CVE-2014-9834 | High | 7.8 | 2017-03-22 | Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file. |
CVE-2014-9833 | High | 7.8 | 2017-03-22 | Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file. |
CVE-2014-9832 | High | 7.8 | 2017-03-22 | Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file. |
CVE-2014-9851 | High | 7.5 | 2017-03-20 | ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash). |
CVE-2014-9850 | High | 7.5 | 2017-03-20 | Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption). |
CVE-2014-9849 | High | 7.5 | 2017-03-20 | The png coder in ImageMagick allows remote attackers to cause a denial of service (crash). |
CVE-2014-9848 | High | 7.5 | 2017-03-20 | Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption). |
CVE-2014-9847 | Critical | 9.8 | 2017-03-20 | The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact. |
CVE-2014-9846 | Critical | 9.8 | 2017-03-20 | Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact. |
CVE-2014-9845 | Medium | 5.5 | 2017-03-20 | The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) via a corrupted dib file. |
CVE-2014-9844 | Medium | 5.5 | 2017-03-20 | The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted image… |
CVE-2014-9843 | Critical | 9.8 | 2017-03-20 | The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors. |
CVE-2014-9842 | High | 7.5 | 2017-03-20 | Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via… |
CVE-2014-9841 | Critical | 9.8 | 2017-03-20 | The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing… |
CVE-2014-9854 | High | 7.5 | 2017-03-17 | coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image." |
CVE-2014-9853 | Medium | 5.5 | 2017-03-17 | Memory leak in coders/rle.c in ImageMagick allows remote attackers to cause a denial of service (memory consumption) via a crafted rle file. |
CVE-2014-9852 | Critical | 9.8 | 2017-03-17 | distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vect… |
CVE-2016-5239 | Critical | 9.8 | 2017-03-15 | The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vecto… |
CVE-2015-8898 | Medium | 5.5 | 2017-03-15 | The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (NULL pointer dereference) v… |
CVE-2015-8897 | Medium | 5.5 | 2017-03-15 | The SpliceImage function in MagickCore/transform.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service (application crash) via a… |
CVE-2015-8896 | Medium | 6.5 | 2017-03-15 | Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted… |
CVE-2015-8895 | High | 7.5 | 2017-03-15 | Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service (application crash) via a crafted lengt… |
CVE-2015-8894 | Medium | 5.5 | 2017-03-15 | Double free vulnerability in coders/tga.c in ImageMagick 7.0.0 and later allows remote attackers to cause a denial of service (application crash) via a crafted… |
CVE-2016-10252 | High | 7.5 | 2017-03-14 | Memory leak in the IsOptionMember function in MagickCore/option.c in ImageMagick before 6.9.2-2, as used in ODR-PadEnc and other products, allows attackers to… |
CVE-2017-6502 | Medium | 5.5 | 2017-03-06 | An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS). |
CVE-2017-6501 | Medium | 5.5 | 2017-03-06 | An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference. |
CVE-2017-6500 | Medium | 5.5 | 2017-03-06 | An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read. |
CVE-2017-6499 | Medium | 5.5 | 2017-03-06 | An issue was discovered in Magick++ in ImageMagick 6.9.7. A specially crafted file creating a nested exception could lead to a memory leak (thus, a DoS). |
CVE-2017-6498 | Medium | 5.5 | 2017-03-06 | An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS. |
CVE-2017-6497 | High | 7.5 | 2017-03-06 | An issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL pointer dereference (thus, a DoS). |
CVE-2016-10070 | Medium | 5.5 | 2017-03-03 | Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-o… |
CVE-2016-10066 | Medium | 5.5 | 2017-03-03 | Buffer overflow in the ReadVIFFImage function in coders/viff.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application… |
CVE-2016-10065 | High | 7.8 | 2017-03-03 | The ReadVIFFImage function in coders/viff.c in ImageMagick before 7.0.1-0 allows remote attackers to cause a denial of service (application crash) or have othe… |
CVE-2016-10061 | Medium | 6.5 | 2017-03-03 | The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attacke… |
CVE-2016-10071 | Medium | 5.5 | 2017-03-02 | coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat fi… |
CVE-2016-10069 | Medium | 5.5 | 2017-03-02 | coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of fr… |
CVE-2016-10068 | Medium | 5.5 | 2017-03-02 | The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted… |
CVE-2016-10067 | High | 7.5 | 2017-03-02 | magick/memory.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via vectors involving "too many exceptio… |
CVE-2016-10064 | High | 7.8 | 2017-03-02 | Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecifi… |
CVE-2016-10063 | High | 7.8 | 2017-03-02 | Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecifi… |
CVE-2016-10062 | Medium | 5.5 | 2017-03-02 | The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote attackers to cause a d… |
CVE-2016-10060 | Medium | 6.5 | 2017-03-02 | The ConcatenateImages function in MagickWand/magick-cli.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows re… |
CVE-2016-9559 | Medium | 6.5 | 2017-03-01 | coders/tiff.c in ImageMagick before 7.0.3.7 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted image. |
CVE-2015-8903 | Medium | 6.5 | 2017-02-27 | The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a… |
CVE-2015-8902 | Medium | 6.5 | 2017-02-27 | The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a cra… |
CVE-2015-8901 | Medium | 6.5 | 2017-02-27 | ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted MIFF file. |
CVE-2015-8900 | Medium | 5.5 | 2017-02-27 | The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR fil… |
CVE-2016-9773 | Medium | 5.5 | 2017-02-17 | Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of servi… |
CVE-2016-8678 | Medium | 5.5 | 2017-02-15 | The IsPixelMonochrome function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.0 allows remote attackers to cause a denial of service (out-of-bounds read a… |
CVE-2016-8677 | High | 8.8 | 2017-02-15 | The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact via a crafted image… |
CVE-2016-8866 | High | 8.8 | 2017-02-15 | The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted… |
CVE-2016-8862 | High | 8.8 | 2017-02-15 | The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, w… |
CVE-2016-9298 | Medium | 5.5 | 2017-01-27 | Heap overflow in the WaveletDenoiseImage function in MagickCore/fx.c in ImageMagick before 6.9.6-4 and 7.x before 7.0.3-6 allows remote attackers to cause a de… |
CVE-2016-7906 | Medium | 5.5 | 2017-01-18 | magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a crafted file. |
CVE-2016-7799 | Medium | 6.5 | 2017-01-18 | MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file. |
CVE-2016-7101 | Medium | 6.5 | 2017-01-18 | The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large row value in an sgi file. |
CVE-2016-6823 | High | 7.5 | 2017-01-18 | Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted height and width valu… |
CVE-2016-8707 | High | 7.8 | 2016-12-23 | An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an o… |
CVE-2016-6520 | Critical | 9.1 | 2016-12-13 | Buffer overflow in MagickCore/enhance.c in ImageMagick before 7.0.2-7 allows remote attackers to have unspecified impact via vectors related to pixel cache mor… |
CVE-2016-6491 | High | 8.8 | 2016-12-13 | Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause… |
CVE-2016-5842 | High | 7.5 | 2016-12-13 | MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which… |
CVE-2016-5841 | Critical | 9.8 | 2016-12-13 | Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly ex… |
CVE-2016-5691 | Critical | 9.8 | 2016-12-13 | The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of validation of (1)… |
CVE-2016-5690 | Critical | 9.8 | 2016-12-13 | The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors inv… |
CVE-2016-5689 | Critical | 9.8 | 2016-12-13 | The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer check… |
CVE-2016-5688 | High | 8.1 | 2016-12-13 | The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors… |
CVE-2016-5687 | Critical | 9.8 | 2016-12-13 | The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a craf… |
CVE-2016-5118 | Critical | 9.8 | 2016-06-10 | The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at t… |
CVE-2016-4564 | Critical | 9.8 | 2016-06-04 | The DrawImage function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 makes an incorrect function call in attempting to locate the n… |
CVE-2016-4563 | High | 8.8 | 2016-06-04 | The TraceStrokePolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles the relationship between the BezierQuantum… |
CVE-2016-4562 | High | 8.8 | 2016-06-04 | The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calculations of certain vertices integer data… |
CVE-2016-3718 | Medium | 5.5 | 2016-05-05 | The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) atta… |
CVE-2016-3717 | Medium | 5.5 | 2016-05-05 | The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image. |
CVE-2016-3716 | Low | 3.3 | 2016-05-05 | The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image. |
CVE-2016-3715 | Medium | 5.5 | 2016-05-05 | The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image. |
CVE-2016-3714 | High | 8.4 | 2016-05-05 | The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow rem… |
CVE-2013-4298 | | 2013-09-10 | The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application… | |
CVE-2012-3437 | | 2012-08-07 | The Magick_png_malloc function in coders/png.c in ImageMagick 6.7.8 and earlier does not use the proper variable type for the allocation size, which might allo… | |
CVE-2012-1798 | Medium | 6.5 | 2012-06-05 | The TIFFGetEXIFProperties function in coders/tiff.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (out-of-bounds read and… |
CVE-2012-1610 | High | 7.5 | 2012-06-05 | Integer overflow in the GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-4 allows remote attackers to cause a denial of service (out-o… |
CVE-2012-1186 | Medium | 5.5 | 2012-06-05 | Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infini… |
CVE-2012-1185 | High | 7.8 | 2012-06-05 | Multiple integer overflows in (1) magick/profile.c or (2) magick/property.c in ImageMagick 6.7.5 and earlier allow remote attackers to cause a denial of servic… |
CVE-2012-0260 | Medium | 6.5 | 2012-06-05 | The JPEGWarningHandler function in coders/jpeg.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (memory consumption) via a… |
CVE-2012-0259 | Medium | 6.5 | 2012-06-05 | The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value i… |
CVE-2012-0248 | Medium | 5.5 | 2012-06-05 | ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags t… |
CVE-2012-0247 | High | 8.8 | 2012-06-05 | ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via crafted offset… |
CVE-2010-4167 | | 2010-11-22 | Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain priv… | |
CVE-2009-1882 | | 2009-06-02 | Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of servic… | |
CVE-2008-1097 | | 2008-03-05 | Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm)… |