Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 916

Export CSV
CVE-2017-12693

ImageMagick: Memory exhaustion in ReadBMPImage function in coders/bmp.c in ImageMagick

The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted BMP file.

CVSS 3.0 · 6.5 Medium EPSS 2.9% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-12875

ImageMagick: Resource exhaustion in WritePixelCachePixels function in coders/xcf.c

The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (CPU consumption) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-12876

ImageMagick: Heap-based buffer overflow in enhance.c

Heap-based buffer overflow in enhance.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-12983

ImageMagick: Heap-based buffer overflow in the ReadSFWImage function

Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

CVSS 3.0 · 8.8 High EPSS 2.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13058

ImageMagick: Memory leak in the WritePCXImage function

In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allows attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13059

ImageMagick: Memory leak in the WriteOneJNGImage function

In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service (WriteJNGImage memory consumption) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13060

ImageMagick: Memory leak in the ReadMATImage function

In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13061

ImageMagick: Length-validation vulnerability was found in the function ReadPSDLayersInternal function

In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service (ReadPSDImage memory exhaustion) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13062

ImageMagick: Memory leak in the formatIPTC function

In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service (WriteMETAImage memory consumption) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13131

ImageMagick: Memory leak in ReadMIFFImage function in coders/miff.c

In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (memory consumption in NewLinkedList in MagickCore/linked-list.c) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13132

ImageMagick: Assertion failure WriteBlobStream function in MagickCore/blob.c

In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor packets" step, which allows attackers to cause a denial of service (assertion failure in WriteBlobStream in MagickCore/blob.c) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13133

ImageMagick: Improper input validadion in load_level function in coders/xcf.c

In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13134

ImageMagick: heap-based buffer over-read in SFWScan function in coders/sfw.c

In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13140

ImageMagick: Denial of service in ReadOnePNGImage function in coders/png.c

In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service (application hang in LockSemaphoreInfo) via a PNG file with a width equal to MAGICK_WIDTH_LIMIT.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13141

ImageMagick: Memory leak in ReadOnePNGImage function in coders/png.c

In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13142

ImageMagick: Improper validation of short files in coders/png.c

In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files.

CVSS 3.0 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13143

ImageMagick: Initialized data use in ReadMATImage function in coders/mat.c

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13144

ImageMagick: Improper size validation in ReadJPEGImage function in error/jpeg.c

In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit" error report) if the image dimensions are too large, as demonstrated by use of the mpc coder.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick