Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 916

Export CSV
CVE-2016-10059

ImageMagick: TIFF file buffer overflow

Buffer overflow in coders/tiff.c in ImageMagick before 6.9.4-1 allows remote attackers to cause a denial of service (application crash) or have unspecified other impact via a crafted TIFF file.

CVSS 3.0 · 7.8 High EPSS 2.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10060

ImageMagick: Write path does not check return of fputc in magick-cli.c

The ConcatenateImages function in MagickWand/magick-cli.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (application crash) via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10061

ImageMagick: Write path does not check return of fputc in tiff.c

The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (crash) via a crafted image file.

CVSS 3.1 · 6.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10062

ImageMagick: Write path does not check return of fwrite

The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote attackers to cause a denial of service (application crash) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10063

ImageMagick: Buffer overflow in tiff.c

Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file, related to extend validity.

CVSS 3.1 · 7.8 High EPSS 2.3% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10064

ImageMagick: Buffer overflow in tiff.c

Buffer overflow in coders/tiff.c in ImageMagick before 6.9.5-1 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.

CVSS 3.1 · 7.8 High EPSS 2.1% KEV · Not listed
Vendors
Imagemagick Opensuse
Products
Imagemagick Leap
CVE-2016-10065

ImageMagick: Out of bounds read in viff file handling

The ReadVIFFImage function in coders/viff.c in ImageMagick before 7.0.1-0 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.

CVSS 3.0 · 7.8 High EPSS 1.9% KEV · Not listed
Vendors
Imagemagick Opensuse
Products
Imagemagick Leap
CVE-2016-10066

ImageMagick: Buffer overflow due to too many exceptions in viff.c

Buffer overflow in the ReadVIFFImage function in coders/viff.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10067

ImageMagick: Buffer overflow due to too many exceptions in memory.c

magick/memory.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via vectors involving "too many exceptions," which trigger a buffer overflow.

CVSS 3.0 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10068

ImageMagick: Segmentation fault in MSL interpreter

The MSL interpreter in ImageMagick before 6.9.6-4 allows remote attackers to cause a denial of service (segmentation fault and application crash) via a crafted XML file.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick Opensuse Opensuse Project
Products
Imagemagick Leap Leap
CVE-2016-10069

ImageMagick: Invalid number of frames not checked in mat files

coders/mat.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via a mat file with an invalid number of frames.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick Opensuse Project
Products
Imagemagick Leap
CVE-2016-10070

ImageMagick: Out-of-bounds read in mat.c

Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.

CVSS 3.1 · 5.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Imagemagick Opensuse
Products
Imagemagick Leap
CVE-2016-10071

ImageMagick: Out-of-bounds read in mat.c

coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file.

CVSS 3.1 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10145

ImageMagick: Off-by-one error in wpg.c

Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy.

CVSS 3.1 · 9.8 Critical EPSS 5.3% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10146

ImageMagick: Memory leak in caption and label handling

Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

CVSS 3.1 · 7.5 High EPSS 5.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10144

ImageMagick: ipl file missing malloc check

coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check.

CVSS 3.1 · 9.8 Critical EPSS 5.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-10252

ImageMagick: Memory leak in isOptionMember function

Memory leak in the IsOptionMember function in MagickCore/option.c in ImageMagick before 6.9.2-2, as used in ODR-PadEnc and other products, allows attackers to trigger memory consumption.

CVSS 3.0 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-5010

ImageMagick: Out-of-bounds read when processing crafted tiff file

coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF file.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-5239

ImageMagick,GraphicsMagick: Gnuplot delegate vulnerability allowing command injection

The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Imagemagick Redhat
Products
Imagemagick Enterprise Linux
CVE-2016-6823

ImageMagick: Integer overflow within BMP encoder/writer

Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted height and width values, which triggers an out-of-bounds write.

CVSS 3.1 · 7.5 High EPSS 5.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick