Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 916

Export CSV
CVE-2017-8351

ImageMagick: Memory leak in the ReadPCDImage function

In ImageMagick 7.0.5-5, the ReadPCDImage function in pcd.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-8352

ImageMagick: Memory leak in the ReadXWDImage function

In ImageMagick 7.0.5-5, the ReadXWDImage function in xwd.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-6502

ImageMagick: File descriptor leak in libmagickcore

An issue was discovered in ImageMagick 6.9.7. A specially crafted webp file could lead to a file-descriptor leak in libmagickcore (thus, a DoS).

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-8354

ImageMagick: Memory leak in the ReadBMPImage function

In ImageMagick 7.0.5-5, the ReadBMPImage function in bmp.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-8355

ImageMagick: Memory leak in the ReadMTVImage function

In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-8356

ImageMagick: Memory leak in the ReadSUNImage function

In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-8357

ImageMagick: Memory leak in the ReadEPTImage function

In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-8765

ImageMagick: Memory leak in the ReadICONImage function

The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-8830

ImageMagick: Memory leak in the ReadBMPImage function

In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-9098

ImageMagick: use of uninitialized memory in RLE decoder

ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensitive information from process memory space, as demonstrated by remote attacks against ImageMagick code in a long-running server process that converts image data on behalf of multiple users. This is caused by a missing initialization step in the ReadRLEImage function in coders/rle.c.

CVSS 3.1 · 7.5 High EPSS 3.6% KEV · Not listed
Vendors
Debian Graphicsmagick Imagemagick
Products
Debian Linux Graphicsmagick Imagemagick
CVE-2017-6501

ImageMagick: NULL pointer dereference in xcf.c

An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference.

CVSS 3.0 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-9142

ImageMagick: Missing checks in the ReadOneJNGImage function

In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-9143

ImageMagick: Memory leak in the REadARTImage function

In ImageMagick 7.0.5-5, the ReadARTImage function in coders/art.c allows attackers to cause a denial of service (memory leak) via a crafted .art file.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-9144

ImageMagick: Incorrect EOF handling in coders/rle.c

In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-9261

ImageMagick: Memory leak in the ReadMNGImage function

In ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-9262

ImageMagick: Memory leak in the ReadJNGImage function

In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-9405

ImageMagick: Memory leak in the ReadICONImage function

In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-9407

ImageMagick: Memory leak in the ReadPALMImage function

In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-9409

ImageMagick: Memory leak in the ReadMPCImage function

In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-8866

ImageMagick: Memory allocation failure in AcquireMagickMemory (incomplete fix for CVE-2016-8862)

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862.

CVSS 3.1 · 8.8 High EPSS 4.8% KEV · Not listed
Vendors
Imagemagick Opensuse
Products
Imagemagick Leap Opensuse