Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 915

Export CSV
CVE-2017-14342

ImageMagick: Memory exhaustion in the ReadWPGImage function

ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-14400

ImageMagick: NULL pointer dereference in the GetVirtualPixels function

In ImageMagick 7.0.7-1 Q16, the PersistPixelCache function in magick/cache.c mishandles the pixel cache nexus, which allows remote attackers to cause a denial of service (NULL pointer dereference in the function GetVirtualPixels in MagickCore/cache.c) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14505

ImageMagick: Null pointer dereference in DrawGetStrokeDashArray function in wand/drawing-wand.c

DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL arrays, which allows attackers to perform Denial of Service (NULL pointer dereference and application crash in AcquireQuantumMemory within MagickCore/memory.c) by providing a crafted Image File as input.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14528

ImageMagick: Use-after-free in the TIFFSetProfiles function

The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred, which allows remote attackers to cause a denial of service (use-after-free after an invalid call to TIFFSetField, and application crash) via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-14607

ImageMagick: Out-of-bounds read in ReadTIFFImage in coders/tiff.c

In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.

CVSS 3.0 · 8.1 High EPSS 2.3% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-14624

ImageMagick: NULL pointer dereference in the PostscriptDelegateMessage function

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-14625

ImageMagick: NULL pointer dereference in the sixel_output_create function

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-14626

ImageMagick: NULL pointer dereference in the sixel_decode function

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c.

CVSS 3.0 · 9.8 Critical EPSS 2.6% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-14682

ImageMagick: Heap buffer overflow in the GetNextToken function

GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14684

ImageMagick: Memory leak in the function ReadVIPSImage

In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCore/memory.c) via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14739

ImageMagick: NULL pointer dereference in the AcquireResampleFilterThreadSet function

The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14741

ImageMagick: Infinite loop in the ReadCAPTIONImage function

The ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers to cause a denial of service (infinite loop) via a crafted font file.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-14989

ImageMagick: Use-after-free in RendererFreetype

A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code.

CVSS 3.0 · 6.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick