Vulnerabilities > Imagemagick

DATE CVE VULNERABILITY TITLE RISK
2017-09-12 CVE-2017-14341 Resource Exhaustion vulnerability in multiple products
ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file.
network
low complexity
imagemagick debian canonical CWE-400
6.5
2017-09-12 CVE-2017-14326 Missing Release of Resource after Effective Lifetime vulnerability in multiple products
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.
network
low complexity
imagemagick canonical CWE-772
6.5
2017-09-12 CVE-2017-14325 Missing Release of Resource after Effective Lifetime vulnerability in multiple products
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to cause a denial of service (memory consumption in ReadMPCImage in coders/mpc.c) via a crafted file.
network
low complexity
imagemagick canonical CWE-772
6.5
2017-09-12 CVE-2017-14324 Missing Release of Resource after Effective Lifetime vulnerability in Imagemagick 7.0.71
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service via a crafted file.
network
low complexity
imagemagick CWE-772
6.5
2017-09-11 CVE-2017-14249 Divide By Zero vulnerability in Imagemagick 7.0.68
ImageMagick 7.0.6-8 Q16 mishandles EOF checks in ReadMPCImage in coders/mpc.c, leading to division by zero in GetPixelCacheTileSize in MagickCore/cache.c, allowing remote attackers to cause a denial of service via a crafted file.
network
low complexity
imagemagick CWE-369
6.5
2017-09-11 CVE-2017-14248 Out-of-bounds Read vulnerability in Imagemagick 7.0.68
A heap-based buffer over-read in SampleImage() in MagickCore/resize.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service via a crafted file.
network
low complexity
imagemagick CWE-125
6.5
2017-09-09 CVE-2017-14224 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Imagemagick 7.0.68
A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of service or code execution via a crafted file.
network
low complexity
imagemagick CWE-119
8.8
2017-09-07 CVE-2017-14175 Excessive Iteration vulnerability in multiple products
In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of File) check might cause huge CPU consumption.
network
low complexity
imagemagick debian canonical CWE-834
6.5
2017-09-07 CVE-2017-14174 Excessive Iteration vulnerability in multiple products
In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check might cause huge CPU consumption.
network
low complexity
imagemagick canonical debian CWE-834
6.5
2017-09-07 CVE-2017-14173 Infinite Loop vulnerability in multiple products
In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRange(depth)+1" when "depth" is large, producing a smaller value than expected.
network
low complexity
imagemagick debian canonical CWE-835
6.5