Vulnerabilities > Imagemagick > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2017-09-04 | CVE-2017-14138 | Missing Release of Resource after Effective Lifetime vulnerability in Imagemagick 7.0.65 ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors. | 7.5 |
| 2017-09-01 | CVE-2017-12693 | Allocation of Resources Without Limits or Throttling vulnerability in multiple products The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted BMP file. | 7.1 |
| 2017-09-01 | CVE-2017-12692 | Allocation of Resources Without Limits or Throttling vulnerability in multiple products The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted VIFF file. | 7.1 |
| 2017-09-01 | CVE-2017-12691 | Allocation of Resources Without Limits or Throttling vulnerability in multiple products The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file. | 7.1 |
| 2017-08-29 | CVE-2017-12875 | Allocation of Resources Without Limits or Throttling vulnerability in Imagemagick 7.0.66 The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (CPU consumption) via a crafted file. | 7.1 |
| 2017-08-23 | CVE-2017-13139 | Out-of-bounds Read vulnerability in Imagemagick In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk. | 7.5 |
| 2017-08-23 | CVE-2017-13133 | Allocation of Resources Without Limits or Throttling vulnerability in Imagemagick 7.0.68 In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file. | 7.1 |
| 2017-08-07 | CVE-2017-12674 | Excessive Iteration vulnerability in Imagemagick 7.0.62 In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service. | 7.1 |
| 2017-08-07 | CVE-2014-9831 | Improper Access Control vulnerability in Imagemagick coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted wpg file. | 8.8 |
| 2017-08-07 | CVE-2014-9830 | Improper Access Control vulnerability in Imagemagick coders/sun.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted sun file. | 8.8 |