ImageMagick vulnerabilities

In ImageMagick 7.0.7-16 Q16 x86_64, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSION check.

In ImageMagick 7.0.7-16 Q16 x86_64, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.

The ReadWPGImage function in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which may lead to denial of service or other unspecified impacts via a malformed WPG file.

The ReadPSDImage function in coders/psd.c in ImageMagick 7.0.7-6 has a vulnerability that allows remote attackers to cause application crashes or potentially other unspecified impacts via a crafted file.

ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.

The AcquireResampleFilterThreadSet function in ImageMagick 7.0.7-4 mishandles failed memory allocation, which can lead to denial of service via NULL Pointer Dereference in DistortImage.

GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document.

The ReadWEBPImage function in coders/webp.c in ImageMagick 7.0.6-5 has an issue with excessive memory allocation that depends only on a length field in a header.

In ImageMagick before version 6.9.8-5 and 7.x before version 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c.

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.

A heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 can be exploited by remote attackers. This may lead to application crashes or other unspecified impacts via a crafted file.

ImageMagick version 7.0.6-2 has a memory leak vulnerability in WriteCALSImage in coders/cals.c.

ImageMagick version 7.0.6-2 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.

ImageMagick version 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders/mat.c.

ImageMagick version 7.0.6-2 has a memory leak vulnerability in WriteINLINEImage in coders/inline.c.

ImageMagick version 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c.

ImageMagick version 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c.

ImageMagick version 7.0.6-2 has a memory leak vulnerability in the WriteMAPImage function in coders/map.c.

ImageMagick version 7.0.6-2 has a memory leak vulnerability in the WritePDFImage function in coders/pdf.c.

The coders/wpg.c file in ImageMagick contains a vulnerability that allows remote attackers to have unspecified impact via a corrupted wpg file.

The vulnerability in coders/sun.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted sun file.

The coders/psd.c file in ImageMagick contains a vulnerability that allows remote attackers to have unspecified impact via a crafted psd file.

The vulnerability in coders/xpm.c in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file.

ImageMagick version 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c.

ImageMagick version 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders/mpc.c.

ImageMagick version 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders/png.c.

ImageMagick version 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c.

ImageMagick version 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c.

In ImageMagick version 7.0.6-1, a memory exhaustion vulnerability was found in the ReadSUNImage function in coders/sun.c, allowing attackers to cause a denial of service.

In ImageMagick version 7.0.6-1, a memory exhaustion vulnerability was found in the ReadMPCImage function in coders/mpc.c, allowing attackers to cause a denial of service.

In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service.

In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service in CloneDrawInfo in draw.c.

ImageMagick version 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c.

A memory leak in AcquireVirtualMemory in ImageMagick before version 7 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

In ImageMagick before version 7.0.6-1, there is a vulnerability in coders/jpeg.c that allows remote attackers to cause an application crash (denial of service) or possibly have unspecified other impact via JPEG data that is too short.

In ImageMagick before version 7.0.6-1, the coders/mpc.c file does not enable seekable streams, which prevents validation of blob sizes. This allows remote attackers to cause application crashes or potentially other unspecified impacts via an image received from stdin.

The ReadDPXImage function in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.

The ReadTGAImage function in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or VST file.

In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function allows remote attackers to obtain sensitive information from process memory. This issue can be triggered by a crafted SVG document mishandled in the GetUserSpaceCoordinateValue function.

In ImageMagick version 7.0.4-9, an infinite loop can occur due to a floating-point rounding error in some color algorithms. This affects ModulateHSL, ModulateHCL, ModulateHCLp, ModulateHSB, ModulateHSI, ModulateHSV, ModulateHWB, ModulateLCHab, and ModulateLCHuv.

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a different vulnerability than CVE-2014-9824.

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, which is a different vulnerability than CVE-2014-9825.

Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, which is a different vulnerability than CVE-2014-9819.

ImageMagick has a heap-based buffer overflow that can be exploited by remote attackers via a crafted quantum file.

ImageMagick has a heap-based buffer overflow that can be exploited by remote attackers using a crafted xpm file.

ImageMagick has a heap-based buffer overflow that can be exploited by remote attackers via a crafted pnm file.

Heap-based buffer overflow in ImageMagick allows remote attackers to exploit a crafted palm file. This is a different vulnerability than CVE-2014-9823.

A heap-based buffer overflow in ImageMagick allows remote attackers to exploit a crafted pdb file.

The vision.c file in ImageMagick contains a vulnerability that allows remote attackers to cause a denial of service via an infinite loop related to 'too many objects'.

The coders/psd.c in ImageMagick has a vulnerability that allows remote attackers to have unspecified impact via a crafted PSD file, leading to an out-of-bounds write.