| CVE-2017-17880 | ALTO8.8 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSION check. | 27/12/2017 |
| CVE-2017-17879 | ALTO8.8 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error. | 27/12/2017 |
| CVE-2017-17682 | MÉDIO6.5 | In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call. | 14/12/2017 |
| CVE-2017-17681 | MÉDIO6.5 | In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file. | 14/12/2017 |
| CVE-2017-17680 | MÉDIO6.5 | In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file. | 14/12/2017 |
| CVE-2017-17504 | MÉDIO6.5 | ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage. | 11/12/2017 |
| CVE-2017-17499 | CRÍTICO9.8 | ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp. | 11/12/2017 |
| CVE-2017-16546 | ALTO8.8 | The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or invalid memory allocation) or possibly have unspecified other impact via a malformed WPG file. | 05/11/2017 |
| CVE-2017-15281 | ALTO8.8 | ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to "Conditional jump or move depends on uninitialised value(s)." | 12/10/2017 |
| CVE-2017-15277 | MÉDIO6.5 | ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked v | 12/10/2017 |
| CVE-2017-15218 | MÉDIO6.5 | ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c. | 10/10/2017 |
| CVE-2017-15217 | MÉDIO6.5 | ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c. | 10/10/2017 |
| CVE-2017-15033 | ALTO7.5 | ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c. | 05/10/2017 |
| CVE-2017-15032 | CRÍTICO9.8 | ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c. | 05/10/2017 |
| CVE-2017-15017 | ALTO8.8 | ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c. | 05/10/2017 |
| CVE-2017-15016 | ALTO8.8 | ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c. | 05/10/2017 |
| CVE-2017-15015 | ALTO8.8 | ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c. | 05/10/2017 |
| CVE-2017-14989 | MÉDIO6.5 | A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code. | 03/10/2017 |
| CVE-2017-14741 | MÉDIO6.5 | The ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers to cause a denial of service (infinite loop) via a crafted font file. | 26/09/2017 |
| CVE-2017-14739 | ALTO7.5 | The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors. | 26/09/2017 |