Export limit exceeded: 425826 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 916

Export CSV
CVE-2017-11166

ImageMagick: memory leak vulnerability in ReadXWDImage function in coders/xwd.c

The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of color-map entries) field in the header of an XWD file.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Imagemagick Redhat
Products
Imagemagick Enterprise Linux
CVE-2017-11170

ImageMagick: Memory leak in ReadTGAImage function when processing TGA or VST file

The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or VST file.

CVSS 3.0 · 8.8 High EPSS 1.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11188

ImageMagick: Resource exhaustion in ReadDPXImage function in coders\dpx.c

The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.

CVSS 3.0 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11310

ImageMagick: Memory leak in read_user_chunk_callback function

The read_user_chunk_callback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via crafted PNG files.

CVSS 3.0 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11352

ImageMagick: Improper EOF handling in coders/rle.c can trigger crash (Incomplete fix for CVE-2017-9144)

In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-11360

ImageMagick: Resource exhaustion in ReadRLEImage function

The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge number_pixels value.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11446

ImageMagick: Infinite loop in ReadPESImage function in coders/pes.c

The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop vulnerability that can cause CPU exhaustion via a crafted PES file.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11447

ImageMagick: Memory leak in ReadSCREENSHOTImage function in coders/screenshot.c

The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory leaks, causing denial of service.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11448

ImageMagick: Info leak from from uninitialized memory in ReadJPEGImage function

The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11449

ImageMagick: coders/mpc.c don't validade blob sizes of mpc images received from stdin

coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin.

CVSS 3.1 · 8.8 High EPSS 3.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11450

ImageMagick: Too short JPEG data causes denial of service in coders/jpeg.c

coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via JPEG data that is too short.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-11478

ImageMagick: Infinite loop in ReadOneDJVUImage function in coders/djvu.c

The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed DJVU image.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11538

ImageMagick: Memory leak in the WriteOnePNGImage() function

When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteOnePNGImage() function in coders/png.c.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11505

ImageMagick: CPU exhaustion in ReadOneJNGImage

The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a malformed JNG file.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11522

ImageMagick: Null-Pointer dereference in WriteOnePNGImage function in coders/png.c

The WriteOnePNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11523

ImageMagick: Endless loop in ReadTXTImage function in coders/txt.c

The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered.

CVSS 3.0 · 6.5 Medium EPSS 3.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11525

ImageMagick: Memory leak in ReadCINImage function in coders/cin.c

The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 4.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11526

ImageMagick: CPU exhaustion in ReadOneMNGImage

The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11527

ImageMagick: Memory leak in the ReadDPXImage function in coders/dpx.c

The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-11528

ImageMagick: Memory leak in ReadDIBImage in dib.c

The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick