Vulnerabilities > Imagemagick > Imagemagick > 7.0.8.11

DATE CVE VULNERABILITY TITLE RISK
2018-09-06 CVE-2018-16644 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image.
4.3
2018-09-03 CVE-2018-16413 Out-of-bounds Read vulnerability in Imagemagick 7.0.811
ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function when called from the coders/psd.c ParseImageResourceBlocks function.
6.8
2018-09-03 CVE-2018-16412 Out-of-bounds Read vulnerability in multiple products
ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function.
6.8
2018-08-21 CVE-2018-15607 Resource Exhaustion vulnerability in Imagemagick 7.0.811
In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails.
7.1