Product:

Imagemagick

(Imagemagick)
Date Id Summary Products Score Patch Annotated
2017-09-07 CVE-2017-14173 In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRange(depth)+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a very large "max_value" value. Ubuntu_linux, Debian_linux, Imagemagick 6.5
2017-09-07 CVE-2017-14172 In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large "extent" field in the header but does not contain sufficient backing data, is provided, the loop over "length" would consume huge CPU resources, since there is no EOF check inside the loop. Ubuntu_linux, Debian_linux, Imagemagick 6.5
2017-08-23 CVE-2017-13145 In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash. Ubuntu_linux, Debian_linux, Imagemagick 6.5
2017-08-23 CVE-2017-13139 In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk. Ubuntu_linux, Debian_linux, Imagemagick 9.8
2017-08-07 CVE-2017-12669 ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteCALSImage in coders/cals.c. Imagemagick 8.8
2017-08-07 CVE-2017-12668 ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePCXImage in coders/pcx.c. Imagemagick 8.8
2017-08-07 CVE-2017-12667 ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders\mat.c. Imagemagick 8.8
2017-08-07 CVE-2017-12666 ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteINLINEImage in coders/inline.c. Imagemagick 8.8
2017-08-07 CVE-2017-12665 ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c. Imagemagick 8.8
2017-08-07 CVE-2017-12664 ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c. Imagemagick 8.8