IM
Product
ImageMagick
On CISA KEVExploited in the wild
899
CVEs
3
On KEV
9.8
Max CVSS
71
New 30D
Severity mix
Critical 50High 245Medium 205Low 0
Watch
Add ImageMagick to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-16749 | 6.5 | Sep 9 | In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob assertion failure and… Affected: before 6.9.9-42; 7.0.0-0 through 7.0.7-29 |
| CVE-2018-16645 | 6.5 | Sep 6 | There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/dib.c in ImageMagick 7.0.8-11, which allows remote attackers… Affected: 7.0.8-11 |
| CVE-2018-16644 | 6.5 | Sep 6 | There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to… Affected: 7.0.8-11 |
| CVE-2018-16643 | 6.5 | Sep 6 | The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check… Affected: 7.0.8-4 |
| CVE-2018-16642 | 6.5 | Sep 6 | The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write Affected: 7.0.7-37 |
| CVE-2018-16641 | 6.5 | Sep 6 | ImageMagick 7.0.8-6 has a memory leak vulnerability in the TIFFWritePhotoshopLayers function in coders/tiff.c Affected: 7.0.8-6 |
| CVE-2018-16640 | 6.5 | Sep 6 | ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c Affected: 7.0.8-5 |
| CVE-2018-16323 | 6.5 | Sep 1 | ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value Affected: before 6.9.10-9; 7.0.0-0 before 7.0.8-9 |
| CVE-2018-15607 | 6.5 | Aug 21 | In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes… Affected: 7.0.8-11 |
| CVE-2018-14437 | 6.5 | Jul 20 | ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c Affected: 7.0.8-4 |
| CVE-2018-14436 | 6.5 | Jul 20 | ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c Affected: 7.0.8-4 |
| CVE-2018-14435 | 6.5 | Jul 20 | ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c Affected: 7.0.8-4 |
| CVE-2018-14434 | 6.5 | Jul 20 | ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c Affected: 7.0.8-4 |
| CVE-2018-13153 | 6.5 | Jul 5 | In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c Affected: 7.0.8-4 |
| CVE-2018-11656 | 6.5 | Jun 1 | In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denial of service via a… Affected: 7.0.7-20 |
| CVE-2018-11655 | 6.5 | Jun 1 | In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function GetImagePixelCache in MagickCore/cache.c, which allows attackers to cause a denial of… Affected: 7.0.7-20 |
| CVE-2018-11251 | 6.5 | May 18 | In ImageMagick 7.0.7-23 Q16 x86_64 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service… Affected: 7.0.7-16 before 7.0.7-21; 7.0.7-23 |
| CVE-2017-18273 | 6.5 | May 18 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to cause a denial of… Affected: 7.0.7-16 |
| CVE-2017-18272 | 6.5 | May 18 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG… Affected: 7.0.7-16 before 7.0.7-21 |
| CVE-2017-18271 | 6.5 | May 18 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of… Affected: 7.0.7-16 |
| CVE-2018-10805 | 6.5 | May 8 | ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c Affected: 7.0.7-28 |
| CVE-2018-10804 | 6.5 | May 8 | ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c Affected: 7.0.7-28 |
| CVE-2018-10177 | 6.5 | Apr 16 | In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file Affected: 7.0.7-28 |
| CVE-2018-9133 | 6.5 | Mar 30 | ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes) with a tiny PoC file Affected: 7.0.7-26 |
| CVE-2017-18254 | 6.5 | Mar 27 | An issue was discovered in ImageMagick 7.0.7 Affected: 7.0.7 |
| CVE-2017-18253 | 6.5 | Mar 27 | An issue was discovered in ImageMagick 7.0.7 Affected: 7.0.7 |
| CVE-2017-18252 | 6.5 | Mar 27 | An issue was discovered in ImageMagick 7.0.7 Affected: 7.0.7 |
| CVE-2017-18251 | 6.5 | Mar 27 | An issue was discovered in ImageMagick 7.0.7 Affected: 7.0.7 |
| CVE-2017-18250 | 6.5 | Mar 27 | An issue was discovered in ImageMagick 7.0.7 Affected: 7.0.7-0 |
| CVE-2018-7470 | 6.5 | Feb 25 | An issue was discovered in ImageMagick 7.0.7-22 Q16 Affected: 7.0.7-22 |
| CVE-2018-7443 | 6.5 | Feb 23 | The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of image data in a file, which allows remote attackers to cause a… Affected: 7.0.7-23 |
| CVE-2018-6930 | 6.5 | Feb 13 | A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.0.7-22 allows a remote attacker to cause a denial of service… Affected: 7.0.7-22 |
| CVE-2018-6876 | 6.5 | Feb 9 | The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers to cause a denial of service… Affected: 7.0.7-22 |
| CVE-2018-6405 | 6.5 | Jan 30 | In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer Affected: before 6.9.9-35; 7.0.0-0 before 7.0.7-23 |
| CVE-2017-18029 | 6.5 | Jan 12 | In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a… Affected: 7.0.6-10 |
| CVE-2017-18028 | 6.5 | Jan 12 | In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allow remote attackers to cause a denial of service… Affected: 7.0.7-1 |
| CVE-2017-18027 | 6.5 | Jan 12 | In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a… Affected: 7.0.7-1 |
| CVE-2018-5358 | 6.5 | Jan 12 | ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c Affected: 7.0.7-22 |
| CVE-2018-5357 | 6.5 | Jan 12 | ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c Affected: 7.0.7-22 |
| CVE-2018-5247 | 6.5 | Jan 5 | In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c Affected: 7.0.7-17 |
| CVE-2018-5246 | 6.5 | Jan 5 | In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c Affected: 7.0.7-17 |
| CVE-2017-18022 | 6.5 | Jan 5 | In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c Affected: 7.0.7-12 |
| CVE-2017-1000476 | 6.5 | Jan 3 | ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service Affected: 7.0.7-12 |
| CVE-2017-1000445 | 6.5 | Jan 2 | ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might lead to denial of service Affected: before 6.9.9-15; 7.0.0-0 through 7.0.7-1 |
| CVE-2017-18008 | 6.5 | Jan 1 | In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c Affected: 7.0.7-17 |
| CVE-2017-17934 | 6.5 | Dec 27 | ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls Affected: 7.0.7-17 |
| CVE-2017-17914 | 6.5 | Dec 27 | In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large… Affected: 7.0.7-16 |
| CVE-2017-17887 | 6.5 | Dec 27 | In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a… Affected: 7.0.7-16 |
| CVE-2017-17886 | 6.5 | Dec 27 | In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service via a… Affected: 7.0.7-12 |
| CVE-2017-17885 | 6.5 | Dec 27 | In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of service via a… Affected: 7.0.7-12 |
The 500 most important CVEs for this product (exploited first, then by severity)
