Search vulnerabilities

Results 915

Export CSV
CVE-2017-8352

ImageMagick: Memory leak in the ReadXWDImage function

In ImageMagick 7.0.5-5, the ReadXWDImage function in xwd.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
CVE-2017-8353

ImageMagick: Memory leak in the ReadPICTImage function

In ImageMagick 7.0.5-5, the ReadPICTImage function in pict.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
CVE-2017-7275

ImageMagick: Memory allocation failure in AcquireMagickMemory (incomplete fix for CVE-2016-8866)

The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and application crash) via a crafted file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862 and CVE-2016-8866.

CVSS 3.0 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2017-8355

ImageMagick: Memory leak in the ReadMTVImage function

In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
CVE-2017-8356

ImageMagick: Memory leak in the ReadSUNImage function

In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
CVE-2017-8357

ImageMagick: Memory leak in the ReadEPTImage function

In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
CVE-2017-8765

ImageMagick: Memory leak in the ReadICONImage function

The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Products
CVE-2017-8830

ImageMagick: Memory leak in the ReadBMPImage function

In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Products
CVE-2017-9098

ImageMagick: use of uninitialized memory in RLE decoder

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image data on behalf of multiple users. This is caused by a missing initialization step in the ReadRLEImage function in coders/rle.c.

CVSS 3.1 · 7.5 High EPSS 3.6% KEV · Not listed
CVE-2017-9141

ImageMagick: Missing checks in the ReadDDSImage function

In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function in MagickCore/profile.c because of missing checks in the ReadDDSImage function in coders/dds.c.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed
CVE-2017-6502

ImageMagick: File descriptor leak in libmagickcore

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS).

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2017-9143

ImageMagick: Memory leak in the REadARTImage function

In ImageMagick 7.0.5-5, the ReadARTImage function in coders/art.c allows attackers to cause a denial of service (memory leak) via a crafted .art file.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
CVE-2017-9144

ImageMagick: Incorrect EOF handling in coders/rle.c

In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
CVE-2017-9261

ImageMagick: Memory leak in the ReadMNGImage function

In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2017-9262

ImageMagick: Memory leak in the ReadJNGImage function

In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Products
CVE-2017-9405

ImageMagick: Memory leak in the ReadICONImage function

In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2017-9407

ImageMagick: Memory leak in the ReadPALMImage function

In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2017-9409

ImageMagick: Memory leak in the ReadMPCImage function

In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2017-9439

ImageMagick: Memory leak in the ReadPDBImage function

In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2016-9298

ImageMagick: Heap buffer overflow in WaveletDenoiseImage()

Heap overflow in the WaveletDenoiseImage function in MagickCore/fx.c in ImageMagick before 6.9.6-4 and 7.x before 7.0.3-6 allows remote attackers to cause a denial of service (crash) via a crafted image.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Products