Writeup Exploits
62,802 exploits tracked across all sources.
ImageMagick 7.0.7-12 Q16 - Denial of Service via Memory Leak in ReadXPMImage
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file.
CVSS 6.5
ImageMagick 7.0.7-12 Q16 - Denial of Service via MAT Image File Memory Leak
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted MAT image file.
CVSS 6.5
ImageMagick 7.0.7-16 - Stack-based Buffer Over-read in WriteWEBPImage
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSION check.
CVSS 8.8
ImageMagick 7.0.7-16 - Heap-Based Buffer Over-Read in ReadOneMNGImage
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.
CVSS 8.8
ImageMagick 7.0.7-12 - Denial of Service via Crafted WPG Image File
In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.
CVSS 6.5
ImageMagick 7.0.7-12 Q16 - Denial of Service via PSD Channel Zip Infinite Loop
In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file.
CVSS 6.5
ImageMagick 7.0.7-12 - Denial of Service via Memory Leak in ReadXPMImage
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file.
CVSS 6.5
ImageMagick < 6.9.9-24 - Heap-Based Buffer Over-Read in PNG Image Handler
ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage.
CVSS 6.5
ImageMagick - Denial of Service via Malformed WPG File Colormap Index
The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or invalid memory allocation) or possibly have unspecified other impact via a malformed WPG file.
CVSS 8.8
ImageMagick - Denial of Service in ReadPSDImage
ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to "Conditional jump or move depends on uninitialised value(s)."
CVSS 8.8
GraphicsMagick 1.3.26 - Exposure of Sensitive Information via Uninitialized GIF Palette
ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.
CVSS 6.5
ImageMagick 7.0.7-2 - Memory Leak in ReadOneJNGImage
ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c.
CVSS 6.5
ImageMagick 7.0.7-2 - Memory Leak in ReadSGIImage
ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c.
CVSS 6.5
ImageMagick 7.0.7-0 Q16 - NULL Pointer Dereference in ReadOneMNGImage
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c.
CVSS 8.8
ImageMagick 7.0.7-0 Q16 - NULL Pointer Dereference in ReadEnhMetaFile
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c.
CVSS 8.8
ImageMagick 7.0.7-0 Q16 - NULL Pointer Dereference in PDFDelegateMessage
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c.
CVSS 8.8
ImageMagick 7.0.7-4 Q16 - Use-After-Free in RenderFreetype
A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code.
CVSS 6.5
ImageMagick 7.0.7-3 - Denial of Service via Crafted Font File
The ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers to cause a denial of service (infinite loop) via a crafted font file.
CVSS 6.5
ImageMagick 7.0.7-4 - Denial of Service via NULL Pointer Dereference in AcquireResampleFilterThreadSet
The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors.
CVSS 7.5
ImageMagick 7.0.7-4 - Denial of Service via Memory Leak in ReadVIPSImage
In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCore/memory.c) via a crafted file.
CVSS 6.5
ImageMagick 7.0.7-0 - Memory Corruption
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c.
CVSS 9.8
ImageMagick 7.0.7-0 - Memory Corruption
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c.
CVSS 9.8
ImageMagick 7.0.7-0 - Memory Corruption
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c.
CVSS 9.8
ImageMagick 7.0.7-0 - Buffer Overflow
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c.
CVSS 9.8
ImageMagick 7.0.7-4 - Info Disclosure
In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.
CVSS 8.1
By Source