Vulnerabilities > Graphicsmagick > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-10-21 | CVE-2018-18544 | Missing Release of Resource after Effective Lifetime vulnerability in multiple products There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31. | 4.3 |
| 2018-03-25 | CVE-2018-9018 | Divide By Zero vulnerability in multiple products In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. | 6.5 |
| 2018-03-14 | CVE-2017-18231 | NULL Pointer Dereference vulnerability in multiple products An issue was discovered in GraphicsMagick 1.3.26. | 4.3 |
| 2018-03-14 | CVE-2017-18230 | NULL Pointer Dereference vulnerability in multiple products An issue was discovered in GraphicsMagick 1.3.26. | 4.3 |
| 2018-03-14 | CVE-2017-18229 | Allocation of Resources Without Limits or Throttling vulnerability in multiple products An issue was discovered in GraphicsMagick 1.3.26. | 4.3 |
| 2018-03-05 | CVE-2017-18219 | Allocation of Resources Without Limits or Throttling vulnerability in multiple products An issue was discovered in GraphicsMagick 1.3.26. | 6.5 |
| 2018-01-14 | CVE-2018-5685 | Infinite Loop vulnerability in multiple products In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function (coders/bmp.c). | 4.3 |
| 2018-01-14 | CVE-2018-5360 | Out-of-bounds Read vulnerability in multiple products LibTIFF before 4.0.6 mishandles the reading of TIFF files, as demonstrated by a heap-based buffer over-read in the ReadTIFFImage function in coders/tiff.c in GraphicsMagick 1.3.27. | 6.8 |
| 2017-12-27 | CVE-2017-17915 | Out-of-bounds Read vulnerability in multiple products In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached. | 6.8 |
| 2017-12-27 | CVE-2017-17913 | Out-of-bounds Read vulnerability in multiple products In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type. | 6.8 |