CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 21/08/2018 |
| CVE-2018-14551 | 严重9.8 | The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption. | 23/07/2018 |
| CVE-2018-14437 | 中危6.5 | ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c. | 20/07/2018 |
| CVE-2018-14436 | 中危6.5 | ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c. | 20/07/2018 |
| CVE-2018-14435 | 中危6.5 | ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c. | 20/07/2018 |
| CVE-2018-14434 | 中危6.5 | ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c. | 20/07/2018 |
| CVE-2018-13153 | 中危6.5 | In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c. | 05/07/2018 |
| CVE-2018-12600 | 高危8.8 | In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file. | 20/06/2018 |
| CVE-2018-12599 | 高危8.8 | In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file. | 20/06/2018 |
| CVE-2018-11656 | 中危6.5 | In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denial of service via a crafted DCM image file. | 01/06/2018 |
| CVE-2018-11655 | 中危6.5 | In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function GetImagePixelCache in MagickCore/cache.c, which allows attackers to cause a denial of service via a crafted CALS image file. | 01/06/2018 |
| CVE-2018-11625 | 高危8.8 | In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file. | 31/05/2018 |
| CVE-2018-11624 | 高危8.8 | In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file. | 31/05/2018 |
| CVE-2018-11251 | 中危6.5 | In ImageMagick 7.0.7-23 Q16 x86_64 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service (application crash in SetGrayscaleImage in MagickCore/quantize.c) via a crafted SUN image file. | 18/05/2018 |
| CVE-2017-18273 | 中危6.5 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted image file that is mishandled in a GetImageIndexInList call. | 18/05/2018 |
| CVE-2017-18272 | 中危6.5 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call. | 18/05/2018 |
| CVE-2017-18271 | 中危6.5 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted MIFF image file. | 18/05/2018 |
| CVE-2018-10805 | 中危6.5 | ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c. | 08/05/2018 |