Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 915

Export CSV
CVE-2017-18029

ImageMagick: memory leak in the function ReadMATImage in coders/mat.c

In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 4.2% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-18028

ImageMagick: memory exhaustion in the function ReadTIFFImage in coders/tiff.c

In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allow remote attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-18027

ImageMagick: memory leak vulnerability in the function ReadMATImage in coders/mat.c

In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file.

CVSS 3.0 · 6.5 Medium EPSS 3.1% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-18022

ImageMagick: Memory Leak in MontageImageCommand function in MagickWand/montage.c

In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c.

CVSS 3.0 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Canonical Imagemagick
Products
Ubuntu Linux Imagemagick
CVE-2017-12806

ImageMagick: memory exhaustion in function format8BIM causing denial of service

In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers to cause a denial of service.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Imagemagick Redhat
Products
Imagemagick Enterprise Linux
CVE-2017-12805

ImageMagick: memory exhaustion in function ReadTIFFImage causing denial of service

In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attackers to cause a denial of service.

CVSS 3.0 · 7.5 High EPSS 2.9% KEV · Not listed
Vendors
Imagemagick Redhat
Products
Imagemagick Enterprise Linux
CVE-2017-1000476

ImageMagick: CPU exhaustion vulnerability in function ReadDDSInfo in coders/dds.c

ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.

CVSS 3.0 · 6.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Canonical Debian Imagemagick and 1 more
Products
Ubuntu Linux Debian Linux Imagemagick and 1 more
CVE-2016-7524

ImageMagick: heap-buffer-overflow in coders/meta.c

coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2016-7523

ImageMagick: OOB read in coders/meta.c

coders/meta.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 2.7% KEV · Not listed
Vendors
Imagemagick
Products
Imagemagick
CVE-2014-2030

ImageMagick: PSD writing layer name buffer overflow ("L%06ld")

Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-1947.

CVSS 3.1 · 8.8 High EPSS 11.1% KEV · Not listed
Vendors
Canonical Imagemagick Opensuse
Products
Ubuntu Linux Imagemagick Opensuse
CVE-2014-1958

ImageMagick: buffer overflow flaw when handling PSD images that use RLE encoding

Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attackers to execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-2030.

CVSS 3.1 · 8.8 High EPSS 3.5% KEV · Not listed
Vendors
Canonical Imagemagick Opensuse
Products
Ubuntu Linux Imagemagick Opensuse
CVE-2014-1947

ImageMagick: PSD writing layer name buffer overflow ("L%02ld")

Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different vulnerability than CVE-2014-2030.

CVSS 3.1 · 7.8 High EPSS 7.0% KEV · Not listed
Vendors
Imagemagick Suse
Products
Imagemagick Linux Enterprise Desktop Linux Enterprise Server and 1 more