RSS   Vulnerabilities for 'Imagemagick'   RSS

2019-02-04
 
CVE-2019-7398

CWE-399
 

 
In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.

 
 
CVE-2019-7397

CWE-399
 

 
In ImageMagick before 7.0.8-25, several memory leaks exist in WritePDFImage in coders/pdf.c.

 
 
CVE-2019-7396

CWE-399
 

 
In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.

 
 
CVE-2019-7395

CWE-399
 

 
In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.

 
2018-12-25
 
CVE-2018-20467

CWE-399
 

 
In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file.

 
2018-10-20
 
CVE-2018-18544

CWE-399
 

 
There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31.

 
2018-10-07
 
CVE-2018-18025

CWE-125
 

 
In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file.

 
 
CVE-2018-18024

CWE-400
 

 
In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file.

 
 
CVE-2018-18023

CWE-125
 

 
In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a crafted SVG image file.

 
2018-10-05
 
CVE-2018-18016

CWE-399
 

 
ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.

 


Copyright 2019, cxsecurity.com

 

Back to Top