Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 916

Export CSV
CVE-2016-7534

ImageMagick: CbYCrY quantum heap-based OOB read/write

The generic decoder in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 3.3% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-7535

ImageMagick: out of bound access for corrupted psd file

coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted PSD file.

CVSS 3.1 · 6.5 Medium EPSS 3.3% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-7536

ImageMagick: SEGV reported in corrupted profile handling

magick/profile.c in ImageMagick allows remote attackers to cause a denial of service (segmentation fault) via a crafted profile.

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-7537

ImageMagick: OOB read for corrupted pdb file

MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted PDB file.

CVSS 3.1 · 6.5 Medium EPSS 3.3% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-7538

ImageMagick: SIGABRT for corrupted PSD file

coders/psd.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 3.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-7539

ImageMagick: potential DOS by not releasing memory

Memory leak in AcquireVirtualMemory in ImageMagick before 7 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

CVSS 3.0 · 7.5 High EPSS 4.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-7540

ImageMagick: writing to rgf format aborts

coders/rgf.c in ImageMagick before 6.9.4-10 allows remote attackers to cause a denial of service (assertion failure) by converting an image to rgf format.

CVSS 3.0 · 6.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-7799

ImageMagick: Mogrify buffer over-read in profile.c

MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 3.7% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2016-7906

ImageMagick: Mogrify heap-use-after-free in attribute.c

magick/attribute.c in ImageMagick 7.0.3-2 allows remote attackers to cause a denial of service (use-after-free) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2016-8677

ImageMagick: Memory allocation failure in AcquireQuantumPixels

The AcquireQuantumPixels function in MagickCore/quantum.c in ImageMagick before 7.0.3-1 allows remote attackers to have unspecified impact via a crafted image file, which triggers a memory allocation failure.

CVSS 3.1 · 8.8 High EPSS 3.9% KEV · Not listed
Vendors
Debian Imagemagick Opensuse
Products
Debian Linux Imagemagick Opensuse
CVE-2016-8678

ImageMagick: Heap-buffer overflow in IsPixelMonochrome

The IsPixelMonochrome function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.0 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted file. NOTE: the vendor says "This is a Q64 issue and we do not support Q64."

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-8862

ImageMagick: Memory allocation failure in AcquireMagickMemory

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick before 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.

CVSS 3.1 · 8.8 High EPSS 4.2% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2016-8866

ImageMagick: Memory allocation failure in AcquireMagickMemory (incomplete fix for CVE-2016-8862)

The AcquireMagickMemory function in MagickCore/memory.c in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8862.

CVSS 3.1 · 8.8 High EPSS 4.8% KEV · Not listed
Vendors
Imagemagick Opensuse
Products
Imagemagick Leap Opensuse
CVE-2016-9298

ImageMagick: Heap buffer overflow in WaveletDenoiseImage()

Heap overflow in the WaveletDenoiseImage function in MagickCore/fx.c in ImageMagick before 6.9.6-4 and 7.x before 7.0.3-6 allows remote attackers to cause a denial of service (crash) via a crafted image.

CVSS 3.0 · 5.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-9556

ImageMagick: Heap-buffer overflow in IsPixelGray in pixel-accessor.h

The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.

CVSS 3.0 · 5.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Debian Imagemagick Opensuse Project
Products
Debian Linux Imagemagick Leap
CVE-2016-9559

ImageMagick: Null pointer dereference in tiff.c

coders/tiff.c in ImageMagick before 7.0.3.7 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted image.

CVSS 3.1 · 6.5 Medium EPSS 3.7% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2016-9773

ImageMagick: Heap-buffer overflow in IsPixelGray in pixel-accessor.h (Incomplete fix for CVE-2016-9556)

Heap-based buffer overflow in the IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3.8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9556.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-10928

ImageMagick: heap-based buffer over-read in the GetNextToken function

In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue function in coders/svg.c.

CVSS 3.0 · 8.8 High EPSS 3.6% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-10995

ImageMagick: Out-of-bounds heap read in mng_get_long function

The mng_get_long function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted MNG image.

CVSS 3.0 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11141

ImageMagick: Memory exhaustion in ReadMATImage function in coders\mat.c

The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted MAT file, related to incorrect ordering of a SetImageExtent call.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick