Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 916

Export CSV
CVE-2017-17886

ImageMagick: memory leak in the function ReadPSDChannelZip in coders/psd.c

In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service via a crafted psd image file.

CVSS 3.0 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-17887

ImageMagick: memory leak in the function GetImagePixelCache

In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-17914

ImageMagick: denial of service in the function ReadOnePNGImage in coders/png.c

In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large loop) via a crafted mng image file.

CVSS 3.0 · 6.5 Medium EPSS 2.1% KEV · Not listed
Vendors
Canonical Debian Imagemagick
Products
Ubuntu Linux Debian Linux Imagemagick
CVE-2017-17934

ImageMagick: memory leaks in coders/msl.c

ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls.

CVSS 3.0 · 6.5 Medium EPSS 2.5% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-5506

ImageMagick: Double-free memory corruption in profile.c

Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file.

CVSS 3.1 · 7.8 High EPSS 2.1% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-5507

ImageMagick: Memory leak in mpc file handling

Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a denial of service (memory consumption) via vectors involving a pixel cache.

CVSS 3.1 · 7.5 High EPSS 6.0% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-5508

ImageMagick: Heap-buffer-overflow in PushQuantumPixel

Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF file.

CVSS 3.0 · 5.5 Medium EPSS 3.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-5509

ImageMagick: Out-of-bounds write flaw in psd file handling

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write.

CVSS 3.1 · 7.8 High EPSS 1.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-5510

ImageMagick: Out-of-bounds write flaw in psd file handling

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write.

CVSS 3.1 · 7.8 High EPSS 2.3% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-5511

ImageMagick: Memory corruption heap overflow in psd.c

coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 5.5% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2017-6497

ImageMagick: NULL pointer dereference in psd.c

An issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL pointer dereference (thus, a DoS).

CVSS 3.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2017-6498

ImageMagick: Assertion failures in tga.c

An issue was discovered in ImageMagick 6.9.7. Incorrect TGA files could trigger assertion failures, thus leading to DoS.

CVSS 3.0 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick
CVE-2016-4562

ImageMagick: Mishandled calculation of certain vertices integer data in DrawDashPolygon() function

The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calculations of certain vertices integer data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

CVSS 3.0 · 8.8 High EPSS 2.6% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-6520

ImageMagick: out-of-bounds read in enhance.c

Buffer overflow in MagickCore/enhance.c in ImageMagick before 7.0.2-7 allows remote attackers to have unspecified impact via vectors related to pixel cache morphology.

CVSS 3.1 · 9.1 Critical EPSS 4.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-6491

ImageMagick: Out-of-bounds read in CopyMagickMemory

Buffer overflow in the Get8BIMProperty function in MagickCore/property.c in ImageMagick before 6.9.5-4 and 7.x before 7.0.2-6 allows remote attackers to cause a denial of service (out-of-bounds read, memory leak, and crash) via a crafted image.

CVSS 3.0 · 8.8 High EPSS 5.0% KEV · Not listed
Vendors
Imagemagick Oracle
Products
Imagemagick Solaris
CVE-2016-5842

ImageMagick: Information leak in MagickCore/property.c

MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bounds read.

CVSS 3.1 · 7.5 High EPSS 6.5% KEV · Not listed
Vendors
Imagemagick Oracle
Products
Imagemagick Solaris
CVE-2016-5841

ImageMagick: Integer overflow in MagickCore/profile.c

Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via vectors involving the offset variable.

CVSS 3.0 · 9.8 Critical EPSS 13.4% KEV · Not listed
Vendors
Imagemagick Oracle
Products
Imagemagick Solaris
CVE-2016-5691

ImageMagick: Possible out-of-bounds write in ReadDCMImage()

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of validation of (1) pixel.red, (2) pixel.green, and (3) pixel.blue.

CVSS 3.0 · 9.8 Critical EPSS 6.1% KEV · Not listed
Vendors
Imagemagick Oracle
Products
Imagemagick Solaris
CVE-2016-5690

ImageMagick: Possible integer overflow when computing pixel scaling table in ReadDCMImage

The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table.

CVSS 3.0 · 9.8 Critical EPSS 6.1% KEV · Not listed
Vendors
Imagemagick Oracle
Products
Imagemagick Solaris
CVE-2016-8707

ImageMagick: OOB write in convert utility when deflating TIFF files

An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution. The vulnerability can be triggered through any user controlled TIFF that is handled by this functionality.

CVSS 3.1 · 7.8 High EPSS 3.8% KEV · Not listed
Vendors
Debian Imagemagick
Products
Debian Linux Imagemagick