Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 916

Export CSV
CVE-2016-10049

ImageMagick: Buffer overflow when reading corrupt RLE files

Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick before 6.9.4-4 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.

CVSS 3.1 · 7.8 High EPSS 2.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9810

ImageMagick: crash in dpx file handler

The dpx file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a malformed dpx file.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9809

ImageMagick: crash on corrupted xwd image

ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted xwd image.

CVSS 3.1 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11534

ImageMagick: Memory leak in the lite_font_map() function

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the lite_font_map() function in coders/wmf.c.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11533

ImageMagick: Heap-buffer over-read in the WriteUILImage() function

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10048

ImageMagick: Arbitrary module loading due to not escaping relative path

Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.

CVSS 3.0 · 7.5 High EPSS 6.5% KEV · Not listed
Vendors
Imagemagick Opensuse Project
Products
Imagemagick Leap
CVE-2017-11532

ImageMagick: Memory leak in the WriteMPCImage() function

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteMPCImage() function in coders/mpc.c.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11531

ImageMagick: Memory leak in the WriteHISTOGRAMImage() function

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteHISTOGRAMImage() function in coders/histogram.c.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10047

ImageMagick: Memory leak in XML file transversal

Memory leak in the NewXMLTree function in magick/xml-tree.c in ImageMagick before 6.9.4-7 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML file.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9808

ImageMagick: crash on corrupted dpc image

ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted dpc image.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11530

ImageMagick: Memory exhaustion in ReadEPTImage in ept.c

The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11529

ImageMagick: Memory leak in ReadMATImage in mat.c

The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10046

ImageMagick: Buffer overflow in draw.c

Heap-based buffer overflow in the DrawImage function in magick/draw.c in ImageMagick before 6.9.5-5 allows remote attackers to cause a denial of service (application crash) via a crafted image file.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11528

ImageMagick: Memory leak in ReadDIBImage in dib.c

The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11527

ImageMagick: Memory leak in the ReadDPXImage function in coders/dpx.c

The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2015-8959

ImageMagick: CPU usage DOS due to corrupted DDS files

coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (CPU consumption) via a crafted DDS file.

CVSS 3.1 · 6.5 Medium EPSS 3.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9807

ImageMagick: double free in pdb coder

The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11526

ImageMagick: CPU exhaustion in ReadOneMNGImage

The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11525

ImageMagick: Memory leak in ReadCINImage function in coders/cin.c

The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 4.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2015-8958

ImageMagick: OOB read and possible crash when processing malformed SUN files

coders/sun.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted SUN file.

CVSS 3.0 · 6.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick