IM
Product
ImageMagick
On CISA KEVExploited in the wild
899
CVEs
3
On KEV
9.8
Max CVSS
71
New 30D
Severity mix
Critical 50High 245Medium 205Low 0
Watch
Add ImageMagick to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-13059 | 6.5 | Aug 22 | In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service (WriteJNGImage… Affected: 7.0.6-6 |
| CVE-2017-13058 | 6.5 | Aug 22 | In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allows attackers to cause a denial of service via a crafted file Affected: 7.0.6-6 |
| CVE-2017-12676 | 6.5 | Aug 7 | In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service Affected: 7.0.6-3 |
| CVE-2017-12675 | 6.5 | Aug 7 | In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which… Affected: 7.0.6-3 |
| CVE-2017-12674 | 6.5 | Aug 7 | In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service Affected: 7.0.6-2 |
| CVE-2017-12673 | 6.5 | Aug 7 | In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service Affected: 7.0.6-3 |
| CVE-2017-12672 | 6.5 | Aug 7 | In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service Affected: 7.0.6-3 |
| CVE-2017-12671 | 6.5 | Aug 7 | In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows… Affected: 7.0.6-3 |
| CVE-2017-12670 | 6.5 | Aug 7 | In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in MagickCore/image.c, which allows attackers to… Affected: 7.0.6-3 |
| CVE-2017-12654 | 6.5 | Aug 7 | The ReadPICTImage function in coders/pict.c in ImageMagick 7.0.6-3 allows attackers to cause a denial of service (memory leak) via a crafted file Affected: 7.0.6-3 |
| CVE-2017-12643 | 6.5 | Aug 7 | ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c Affected: 7.0.6-1 |
| CVE-2017-12566 | 6.5 | Aug 5 | In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allows attackers to cause a denial of service, related to the… Affected: 7.0.6-2 |
| CVE-2017-12565 | 6.5 | Aug 5 | In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service Affected: 7.0.6-2 |
| CVE-2017-12564 | 6.5 | Aug 5 | In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service Affected: 7.0.6-2 |
| CVE-2017-12563 | 6.5 | Aug 5 | In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service Affected: 7.0.6-2 |
| CVE-2017-12434 | 6.5 | Aug 4 | In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion… Affected: 7.0.6-1 |
| CVE-2017-12433 | 6.5 | Aug 4 | In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadPESImage in coders/pes.c, which allows attackers to cause a denial of service, related to… Affected: 7.0.6-1 |
| CVE-2017-12432 | 6.5 | Aug 4 | In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to cause a denial of service Affected: 7.0.6-1 |
| CVE-2017-12431 | 6.5 | Aug 4 | In ImageMagick 7.0.6-1, a use-after-free vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service Affected: 7.0.6-1 |
| CVE-2017-12427 | 6.5 | Aug 4 | The ProcessMSLScript function in coders/msl.c in ImageMagick before 6.9.9-5 and 7.x before 7.0.6-5 allows remote attackers to cause a denial of service (memory leak) via a crafted… Affected: through 6.9.9-4; 7.0.1-0; 7.0.1-1; 7.0.1-2; 7.0.1-3; 7.0.1-4; +34 more |
| CVE-2017-12140 | 6.5 | Aug 2 | The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file Affected: 7.0.6-1 |
| CVE-2017-11755 | 6.5 | Jul 30 | The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file that is mishandled in an… Affected: 7.0.6-4 |
| CVE-2017-11754 | 6.5 | Jul 30 | The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file that is mishandled in an… Affected: 7.0.6-4 |
| CVE-2017-11753 | 6.5 | Jul 30 | The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted… Affected: 7.0.6-4 |
| CVE-2017-11752 | 6.5 | Jul 30 | The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file Affected: 7.0.6-4 |
| CVE-2017-11751 | 6.5 | Jul 30 | The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file Affected: 7.0.6-4 |
| CVE-2017-11750 | 6.5 | Jul 30 | The ReadOneJNGImage function in coders/png.c in ImageMagick 6.9.9-4 and 7.0.6-4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file Affected: 6.9.9-4; 7.0.6-4 |
| CVE-2017-11724 | 6.5 | Jul 29 | The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantum_info and clone_info data structures Affected: 6.9.9-3; 7.0.1-0; 7.0.1-1; 7.0.1-2; 7.0.1-3; 7.0.1-4; +34 more |
| CVE-2017-11644 | 6.5 | Jul 26 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c Affected: 7.0.6-1 |
| CVE-2017-11640 | 6.5 | Jul 26 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c Affected: 7.0.6-1 |
| CVE-2017-11639 | 6.5 | Jul 26 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c, related to the… Affected: 7.0.6-1 |
| CVE-2017-11540 | 6.5 | Jul 23 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex() function, called from the WritePICONImage… Affected: 7.0.6-1 |
| CVE-2017-11539 | 6.5 | Jul 23 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadOnePNGImage() function in coders/png.c Affected: 7.0.6-1 |
| CVE-2017-11538 | 6.5 | Jul 23 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteOnePNGImage() function in coders/png.c Affected: 7.0.6-1 |
| CVE-2017-11537 | 6.5 | Jul 23 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an… Affected: 7.0.6-1 |
| CVE-2017-11536 | 6.5 | Jul 23 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteJP2Image() function in coders/jp2.c Affected: 7.0.6-1 |
| CVE-2017-11535 | 6.5 | Jul 23 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c Affected: 7.0.6-1 |
| CVE-2017-11534 | 6.5 | Jul 23 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the lite_font_map() function in coders/wmf.c Affected: 7.0.6-1 |
| CVE-2017-11533 | 6.5 | Jul 23 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c Affected: 7.0.6-1 |
| CVE-2017-11532 | 6.5 | Jul 23 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteMPCImage() function in coders/mpc.c Affected: 7.0.6-1 |
| CVE-2017-11531 | 6.5 | Jul 23 | When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteHISTOGRAMImage() function in coders/histogram.c Affected: 7.0.6-1 |
| CVE-2017-11530 | 6.5 | Jul 23 | The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a… Affected: through 6.9.8-10; 7.0.1-0; 7.0.1-1; 7.0.1-2; 7.0.1-3; 7.0.1-4; +34 more |
| CVE-2017-11529 | 6.5 | Jul 23 | The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted… Affected: through 6.9.8-10; 7.0.1-0; 7.0.1-1; 7.0.1-2; 7.0.1-3; 7.0.1-4; +34 more |
| CVE-2017-11528 | 6.5 | Jul 23 | The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted… Affected: through 6.9.8-10; 7.0.1-0; 7.0.1-1; 7.0.1-2; 7.0.1-3; 7.0.1-4; +34 more |
| CVE-2017-11527 | 6.5 | Jul 23 | The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a… Affected: through 6.9.8-10; 7.0.1-0; 7.0.1-1; 7.0.1-2; 7.0.1-3; 7.0.1-4; +34 more |
| CVE-2017-11526 | 6.5 | Jul 23 | The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU… Affected: through 6.9.8-10; 7.0.1-0; 7.0.1-1; 7.0.1-2; 7.0.1-3; 7.0.1-4; +34 more |
| CVE-2017-11525 | 6.5 | Jul 23 | The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a… Affected: through 6.9.9-0; 7.0.0-0; 7.0.1-0; 7.0.1-1; 7.0.1-2; 7.0.1-3; +34 more |
| CVE-2017-11524 | 6.5 | Jul 23 | The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of service (assertion failure and… Affected: through 6.9.8-10; 7.0.0-0; 7.0.1-0; 7.0.1-1; 7.0.1-2; 7.0.1-3; +34 more |
| CVE-2017-11523 | 6.5 | Jul 22 | The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop) via a crafted… Affected: through 6.9.9-0; 7.0.0-0; 7.0.1-0; 7.0.1-1; 7.0.1-2; 7.0.1-3; +34 more |
| CVE-2017-11522 | 6.5 | Jul 22 | The WriteOnePNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (NULL pointer… Affected: through 6.9.9-0; 7.0.0-0; 7.0.1-0; 7.0.1-1; 7.0.1-2; 7.0.1-3; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)