Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 915

Export CSV
CVE-2014-9813

ImageMagick: crash on corrupted viff file

ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file.

CVSS 3.1 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11753

ImageMagick: heap-based buffer over-read in GetImageDepth function

The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted Flexible Image Transport System (FITS) file.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11752

ImageMagick: Memory leak in ReadMAGICKImage function

The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10055

ImageMagick: Buffer overflow in PDB coder

Buffer overflow in the WritePDBImage function in coders/pdb.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.

CVSS 3.1 · 7.8 High EPSS 1.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11751

ImageMagick: Memory leak in WritePICONImage function

The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11750

ImageMagick: NULL pointer dereference in ReadOneJNGImage function

The ReadOneJNGImage function in coders/png.c in ImageMagick 6.9.9-4 and 7.0.6-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10054

ImageMagick: Buffer overflow in MAP coder

Buffer overflow in the WriteMAPImage function in coders/map.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.

CVSS 3.1 · 7.8 High EPSS 1.8% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9812

ImageMagick: NULL pointer dereference in ps file handling

ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ps file.

CVSS 3.1 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11724

ImageMagick: Memory leaks in ReadMATImage function involving the quantum_info and clone_info data structures

The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantum_info and clone_info data structures.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11644

ImageMagick: Memory-Leak in ReadMATImage() coders/mat.c

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10053

ImageMagick: TIFF divide by zero

The WriteTIFFImage function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11640

ImageMagick: NULL pointer dereference in WritePTIFImage() in coders/tiff.c

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c.

CVSS 3.0 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11639

ImageMagick: heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c, related to the GetPixelLuma function in MagickCore/pixel-accessor.h.

CVSS 3.0 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10052

ImageMagick: Out-of-bounds write in exif (jpeg) reader

Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before 6.9.5-6 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.

CVSS 3.1 · 7.8 High EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11540

ImageMagick: Heap buffer over-read in the GetPixelIndex() function

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex() function, called from the WritePICONImage function in coders/xpm.c.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11539

ImageMagick: Memory leak in the ReadOnePNGImage() function

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadOnePNGImage() function in coders/png.c.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10051

ImageMagick: Use after free when using identify or convert

Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.

CVSS 3.1 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Imagemagick Opensuse
Products
Imagemagick Leap
CVE-2017-11537

ImageMagick: Floating point exception in the WritePALMImage() function

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11536

ImageMagick: Memory leak in the WriteJP2Image() function

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteJP2Image() function in coders/jp2.c.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10050

ImageMagick: Heap overflow when reading corrupt RLE files

Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.

CVSS 3.1 · 7.8 High EPSS 2.1% KEV · Not listed
Vendors
Imagemagick Opensuse
Products
Imagemagick Leap