Vulnerabilities > Imagemagick

DATE CVE VULNERABILITY TITLE RISK
2017-08-23 CVE-2017-13141 Missing Release of Resource after Effective Lifetime vulnerability in Imagemagick
In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c.
network
low complexity
imagemagick CWE-772
6.5
6.5
2017-08-23 CVE-2017-13140 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Imagemagick
In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service (application hang in LockSemaphoreInfo) via a PNG file with a width equal to MAGICK_WIDTH_LIMIT.
network
low complexity
imagemagick CWE-119
6.5
6.5
2017-08-23 CVE-2017-13139 Out-of-bounds Read vulnerability in multiple products
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.
network
low complexity
imagemagick debian canonical CWE-125
critical
 9.8
9.8
2017-08-23 CVE-2017-13134 Out-of-bounds Read vulnerability in Imagemagick 7.0.66
In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file.
network
low complexity
imagemagick CWE-125
6.5
6.5
2017-08-23 CVE-2017-13133 Allocation of Resources Without Limits or Throttling vulnerability in Imagemagick 7.0.68
In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file.
network
low complexity
imagemagick CWE-770
6.5
6.5
2017-08-23 CVE-2017-13132 Reachable Assertion vulnerability in Imagemagick 7.0.68
In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoColor packets" step, which allows attackers to cause a denial of service (assertion failure in WriteBlobStream in MagickCore/blob.c) via a crafted file.
network
low complexity
imagemagick CWE-617
6.5
6.5
2017-08-23 CVE-2017-13131 Missing Release of Resource after Effective Lifetime vulnerability in Imagemagick 7.0.68
In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (memory consumption in NewLinkedList in MagickCore/linked-list.c) via a crafted file.
network
low complexity
imagemagick CWE-772
6.5
6.5
2017-08-22 CVE-2017-13062 Missing Release of Resource after Effective Lifetime vulnerability in Imagemagick 7.0.66
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a denial of service (WriteMETAImage memory consumption) via a crafted file.
network
low complexity
imagemagick CWE-772
6.5
6.5
2017-08-22 CVE-2017-13061 Improper Input Validation vulnerability in Imagemagick 7.0.65
In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service (ReadPSDImage memory exhaustion) via a crafted file.
network
low complexity
imagemagick CWE-20
6.5
6.5
2017-08-22 CVE-2017-13060 Missing Release of Resource after Effective Lifetime vulnerability in Imagemagick 7.0.65
In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted file.
network
low complexity
imagemagick CWE-772
6.5
6.5