Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 916

Export CSV
CVE-2017-11524

ImageMagick: Assertion failure in the WriteBlob function

The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 3.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11523

ImageMagick: Endless loop in ReadTXTImage function in coders/txt.c

The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered.

CVSS 3.0 · 6.5 Medium EPSS 3.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2015-8957

ImageMagick: OOB read and possible crash when handling malformed SUN files

Buffer overflow in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service (application crash) via a crafted SUN file.

CVSS 3.0 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11522

ImageMagick: Null-Pointer dereference in WriteOnePNGImage function in coders/png.c

The WriteOnePNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11505

ImageMagick: CPU exhaustion in ReadOneJNGImage

The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a malformed JNG file.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11538

ImageMagick: Memory leak in the WriteOnePNGImage() function

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteOnePNGImage() function in coders/png.c.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11478

ImageMagick: Infinite loop in ReadOneDJVUImage function in coders/djvu.c

The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed DJVU image.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2015-8903

ImageMagick: denial of service flaw in VICAR file processing

The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted VICAR file.

CVSS 3.1 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2015-8902

ImageMagick: denial of service flaw in PDB file processing

The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted PDB file.

CVSS 3.1 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9806

ImageMagick: fd leak due to corrupted file

ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9805

ImageMagick: crash on corrupted pnm file

ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted pnm file.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11450

ImageMagick: Too short JPEG data causes denial of service in coders/jpeg.c

coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via JPEG data that is too short.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-11449

ImageMagick: coders/mpc.c don't validade blob sizes of mpc images received from stdin

coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin.

CVSS 3.1 · 8.8 High EPSS 3.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2015-8901

ImageMagick: denial of service flaw in MIFF file processing

ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted MIFF file.

CVSS 3.1 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11448

ImageMagick: Info leak from from uninitialized memory in ReadJPEGImage function

The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11447

ImageMagick: Memory leak in ReadSCREENSHOTImage function in coders/screenshot.c

The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory leaks, causing denial of service.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2015-8900

ImageMagick: denial of service flaw in HDR file processing

The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of service (infinite loop) via a crafted HDR file.

CVSS 3.1 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-9804

ImageMagick: infinite loop DoS in vision.c

vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via vectors related to "too many object."

CVSS 3.1 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11446

ImageMagick: Infinite loop in ReadPESImage function in coders/pes.c

The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop vulnerability that can cause CPU exhaustion via a crafted PES file.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11360

ImageMagick: Resource exhaustion in ReadRLEImage function

The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge number_pixels value.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick