Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 916

Export CSV
CVE-2017-13145

ImageMagick: Improper input validation in ReadJP2Image function in coders/jp2.c

In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash.

CVSS 3.1 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-13146

ImageMagick: Memory leak in the ReadMATImage function in coders/mat.c.

In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13658

ImageMagick: Missing NULL check in the ReadMATImage function

In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13758

ImageMagick: Heap-based buffer overflow in the TracePoint() function in MagickCore/draw.c

In ImageMagick 7.0.6-10, there is a heap-based buffer overflow in the TracePoint() function in MagickCore/draw.c.

CVSS 3.0 · 6.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-13768

ImageMagick: NULL pointer dereference in IdentifyImage function in MagickCore/identify.c

Null Pointer Dereference in the IdentifyImage function in MagickCore/identify.c in ImageMagick through 7.0.6-10 allows an attacker to perform denial of service by sending a crafted image file.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-13769

ImageMagick: Improper input validation in WriteTHUMBNAILImage function in coders/thumbnail.c

The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service (buffer over-read) by sending a crafted JPEG file.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-14060

ImageMagick: NULL pointer dereference in ReadCUTImage function

In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denial of Service (in the QueueAuthenticPixelCacheNexus function within the MagickCore/cache.c file) by submitting a malformed image file.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-14137

ImageMagick: Excessive memory allocation in ReadWEBPImage function in coders/webp.c

ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header.

CVSS 3.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14138

ImageMagick: Memory leak in ReadWEBPImage function in coders/webp.c

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.

CVSS 3.0 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14139

GraphicsMagick: Memory leak in WriteMSLImage function in coders/msl.c

ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c.

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14172

ImageMagick: Lack of an EOF check in ReadPSImage() function

In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large "extent" field in the header but does not contain sufficient backing data, is provided, the loop over "length" would consume huge CPU resources, since there is no EOF check inside the loop.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-14173

ImageMagick: Integer overflow in the function ReadTXTImage()

In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRange(depth)+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a very large "max_value" value.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-14174

ImageMagick: Lack of EOF check in the ReadPSDLayersInternal() function

In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large "length" field in the header but does not contain sufficient backing data, is provided, the loop over "length" would consume huge CPU resources, since there is no EOF check inside the loop.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-14175

ImageMagick: Lack of EOF check in the ReadXBMImage() function

In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted XBM file, which claims large rows and columns fields in the header but does not contain sufficient backing data, is provided, the loop over the rows would consume huge CPU resources, since there is no EOF check inside the loop.

CVSS 3.1 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-14224

ImageMagick: Heap-based buffer overflow in the WritePCXImage function

A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file.

CVSS 3.0 · 8.8 High EPSS 4.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14248

ImageMagick: Heap-based buffer over-read in the SampleImage() function

A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14249

ImageMagick: Division by zero in the GetPixelCacheTileSize function

ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14324

ImageMagick: Memory leak in the ReadMPCImage function

In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14325

ImageMagick: Memory leak in the PersistPixelCache function

In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to cause a denial of service (memory consumption in ReadMPCImage in coders/mpc.c) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-14326

ImageMagick: Memory leak in the ReadMATImage function

In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick