Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 915

Export CSV
CVE-2017-15277

ImageMagick: Unitialized palette in ReadGIFImage when processing a crafted GIF file

ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.

CVSS 3.0 · 6.5 Medium EPSS 19.2% KEV · Not listed
Vendors
Graphicsmagick Imagemagick
Products
Graphicsmagick Imagemagick
CVE-2017-15281

ImageMagick: Conditional statement depends on unitialized value

ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to "Conditional jump or move depends on uninitialised value(s)."

CVSS 3.0 · 8.8 High EPSS 2.7% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-16546

ImageMagick: Invalid memory allocation in the ReadWPGImage function

The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or invalid memory allocation) or possibly have unspecified other impact via a malformed WPG file.

CVSS 3.1 · 8.8 High EPSS 2.2% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-17680

ImageMagick: Memory leak in ReadXPMImage function in coders/xpm.c

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file.

CVSS 3.0 · 6.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-17681

ImageMagick: Infinite loop in ReadPSDChannelZip function in coders/psd.c

In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file.

CVSS 3.0 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-17682

ImageMagick: Resource exhaustion in ExtractPostscript function in coders/wpg.c

In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.

CVSS 3.0 · 6.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-17879

ImageMagick: Heap-based buffer over-read in ReadOneMNGImage function in coders/png.c

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.

CVSS 3.0 · 8.8 High EPSS 2.9% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-17880

ImageMagick: stack-based buffer over-read in WriteWEBPImage in coders/webp.c

In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSION check.

CVSS 3.0 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-17881

ImageMagick: memory leak vulnerability in the function ReadMATImage in coders/mat.c

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted MAT image file.

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-17882

ImageMagick: Memory leak in function ReadXPMImage in coders/xpm.c

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file.

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-17883

ImageMagick: memory leak in the function ReadPGXImage in coders/pgx.c

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which allows attackers to cause a denial of service via a crafted PGX image file.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-17884

ImageMagick: memory leak in function WriteOnePNGImage in coders/png.c

In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted PNG image file.

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-17885

ImageMagick: memory leak in the function ReadPICTImage in coders/pict.c

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of service via a crafted PICT image file.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick