Open-Source Security Intelligence

Know every vulnerability
before it knows you.

DevGuard continuously monitors your dependencies and alerts you when CVEs like this one affect your stack — with real-time threat intelligence built for developers.

Checkout DevGuardView on GitHub
Search

DLA-1081-1

Published Aug 31, 2017·Last modified Mar 9, 2026
Affected Components(0)

No affected components available

Description

imagemagick - security update

Risk Scores
Base Score
0.0

Measures severity based on intrinsic characteristics of the vulnerability, independent of environment.

Threat Intelligence
0.0

No exploitation activity has been observed at this time. Continue routine monitoring.

EPSS
4.12%

The exploit probability is very low. The vulnerability is unlikely to be exploited in the next 30 days.

Exploit
Not available

We did not find any exploit available. Neither in GitHub repositories nor in the Exploit-Database.

Related Vulnerabilities
  • CVE-2017-10928

    In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue function in coders/svg.c.

    UpstreamEPSS 3.6%
  • CVE-2017-10995

    The mng_get_long function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted MNG image.

    UpstreamEPSS 1.8%
  • CVE-2017-11141

    The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted MAT file, related to incorrect ordering of a SetImageExtent call.

    UpstreamEPSS 1.7%
  • CVE-2017-11170

    The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or VST file.

    UpstreamEPSS 1.7%
  • CVE-2017-11188

    The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.

    UpstreamEPSS 1.6%
  • CVE-2017-11352

    In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144.

    UpstreamEPSS 1.8%
  • CVE-2017-11360

    The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge number_pixels value.

    UpstreamEPSS 0.9%
  • CVE-2017-11446

    The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop vulnerability that can cause CPU exhaustion via a crafted PES file.

    UpstreamEPSS 1.7%
  • CVE-2017-11448

    The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file.

    UpstreamEPSS 2.7%
  • CVE-2017-11449

    coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin.

    UpstreamEPSS 3.4%
  • CVE-2017-11450

    coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via JPEG data that is too short.

    UpstreamEPSS 2.4%
  • CVE-2017-11478

    The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed DJVU image.

    UpstreamEPSS 1.8%
  • CVE-2017-11505

    The ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a malformed JNG file.

    UpstreamEPSS 2.3%
  • CVE-2017-11523

    The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop) via a crafted file, because the end-of-file condition is not considered.

    UpstreamEPSS 3.0%
  • CVE-2017-11524

    The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted file.

    UpstreamEPSS 3.2%
  • CVE-2017-11525

    The ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

    UpstreamEPSS 4.1%
  • CVE-2017-11526

    The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted file.

    UpstreamEPSS 2.9%
  • CVE-2017-11527

    The ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

    UpstreamEPSS 1.8%
  • CVE-2017-11528

    The ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

    UpstreamEPSS 1.9%
  • CVE-2017-11529

    The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

    UpstreamEPSS 1.4%
  • CVE-2017-11530

    The ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

    UpstreamEPSS 2.1%
  • CVE-2017-11531

    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteHISTOGRAMImage() function in coders/histogram.c.

    UpstreamEPSS 1.5%
  • CVE-2017-11532

    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteMPCImage() function in coders/mpc.c.

    UpstreamEPSS 1.4%
  • CVE-2017-11533

    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function in coders/uil.c.

    UpstreamEPSS 1.9%
  • CVE-2017-11534

    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the lite_font_map() function in coders/wmf.c.

    UpstreamEPSS 0.9%
  • CVE-2017-11535

    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function in coders/ps.c.

    UpstreamEPSS 1.7%
  • CVE-2017-11537

    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an incorrect bits-per-pixel calculation.

    UpstreamEPSS 1.9%
  • CVE-2017-11539

    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadOnePNGImage() function in coders/png.c.

    UpstreamEPSS 2.0%
  • CVE-2017-11639

    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteCIPImage() function in coders/cip.c, related to the GetPixelLuma function in MagickCore/pixel-accessor.h.

    UpstreamEPSS 2.7%
  • CVE-2017-11640

    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function in coders/tiff.c.

    UpstreamEPSS 2.7%
  • CVE-2017-11644

    When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c.

    UpstreamEPSS 1.6%
  • CVE-2017-11724

    The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantum_info and clone_info data structures.

    UpstreamEPSS 1.8%
  • CVE-2017-11751

    The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

    UpstreamEPSS 1.8%
  • CVE-2017-11752

    The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file.

    UpstreamEPSS 1.8%
  • CVE-2017-12140

    The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file.

    UpstreamEPSS 2.2%
  • CVE-2017-12418

    ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c.

    UpstreamEPSS 2.5%
  • CVE-2017-12427

    The ProcessMSLScript function in coders/msl.c in ImageMagick before 6.9.9-5 and 7.x before 7.0.6-5 allows remote attackers to cause a denial of service (memory leak) via a crafted file, related to the WriteMSLImage function.

    UpstreamEPSS 2.1%
  • CVE-2017-12428

    In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service in CloneDrawInfo in draw.c.

    UpstreamEPSS 2.1%
  • CVE-2017-12429

    In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service.

    UpstreamEPSS 1.8%
  • CVE-2017-12430

    In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service.

    UpstreamEPSS 2.3%
  • CVE-2017-12431

    In ImageMagick 7.0.6-1, a use-after-free vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service.

    UpstreamEPSS 1.4%
  • CVE-2017-12432

    In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to cause a denial of service.

    UpstreamEPSS 2.1%
  • CVE-2017-12433

    In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadPESImage in coders/pes.c, which allows attackers to cause a denial of service, related to ResizeMagickMemory in memory.c.

    UpstreamEPSS 1.1%
  • CVE-2017-12435

    In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service.

    UpstreamEPSS 2.3%
  • CVE-2017-12563

    In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service.

    UpstreamEPSS 1.6%
  • CVE-2017-12564

    In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service.

    UpstreamEPSS 1.1%
  • CVE-2017-12565

    In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service.

    UpstreamEPSS 1.2%
  • CVE-2017-12566

    In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allows attackers to cause a denial of service, related to the function ReadSVGImage in svg.c.

    UpstreamEPSS 1.2%
  • CVE-2017-12587

    ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c.

    UpstreamEPSS 2.0%
  • CVE-2017-12640

    ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c.

    UpstreamEPSS 2.5%
  • CVE-2017-12641

    ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\png.c.

    UpstreamEPSS 1.4%
  • CVE-2017-12642

    ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c.

    UpstreamEPSS 1.4%
  • CVE-2017-12643

    ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c.

    UpstreamEPSS 2.5%
  • CVE-2017-12654

    The ReadPICTImage function in coders/pict.c in ImageMagick 7.0.6-3 allows attackers to cause a denial of service (memory leak) via a crafted file.

    UpstreamEPSS 1.1%
  • CVE-2017-12664

    ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c.

    UpstreamEPSS 1.5%
  • CVE-2017-12665

    ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c.

    UpstreamEPSS 1.5%
  • CVE-2017-12668

    ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePCXImage in coders/pcx.c.

    UpstreamEPSS 1.5%
  • CVE-2017-12670

    In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in MagickCore/image.c, which allows attackers to cause a denial of service.

    UpstreamEPSS 1.5%
  • CVE-2017-12674

    In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service.

    UpstreamEPSS 1.6%
  • CVE-2017-12675

    In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to cause a denial of service.

    UpstreamEPSS 0.9%
  • CVE-2017-12676

    In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service.

    UpstreamEPSS 0.9%
  • CVE-2017-12877

    Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file.

    UpstreamEPSS 2.3%
  • CVE-2017-12983

    Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

    UpstreamEPSS 2.4%
  • CVE-2017-13133

    In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file.

    UpstreamEPSS 1.6%
  • CVE-2017-13134

    In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which allows attackers to cause a denial of service via a crafted file.

    UpstreamEPSS 2.0%
  • CVE-2017-13139

    In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.

    UpstreamEPSS 3.8%
  • CVE-2017-13142

    In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files.

    UpstreamEPSS 1.8%
  • CVE-2017-13143

    In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory.

    UpstreamEPSS 2.9%
  • CVE-2017-13144

    In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit" error report) if the image dimensions are too large, as demonstrated by use of the mpc coder.

    UpstreamEPSS 2.0%
  • CVE-2017-13146

    In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c.

    UpstreamEPSS 1.3%
  • CVE-2017-13658

    In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.

    UpstreamEPSS 1.3%
  • CVE-2017-8352

    In ImageMagick 7.0.5-5, the ReadXWDImage function in xwd.c allows attackers to cause a denial of service (memory leak) via a crafted file.

    UpstreamEPSS 1.9%
  • CVE-2017-9144

    In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c.

    UpstreamEPSS 1.9%
  • CVE-2017-9501

    In ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function LockSemaphoreInfo, which allows attackers to cause a denial of service via a crafted file.

    UpstreamEPSS 1.9%
  • EUVD-2017-17312
    Upstream
  • EUVD-2017-18082
    Upstream
  • EUVD-2017-18433
    Upstream
  • EUVD-2017-2566
    Upstream
  • EUVD-2017-2632
    Upstream
  • EUVD-2017-2776
    Upstream
  • EUVD-2017-2805
    Upstream
  • EUVD-2017-2822
    Upstream
  • EUVD-2017-2981
    Upstream
  • EUVD-2017-2989
    Upstream
  • EUVD-2017-3067
    Upstream
  • EUVD-2017-3069
    Upstream
  • EUVD-2017-3070
    Upstream
  • EUVD-2017-3071
    Upstream
  • EUVD-2017-3097
    Upstream
  • EUVD-2017-3122
    Upstream
  • EUVD-2017-3139
    Upstream
  • EUVD-2017-3140
    Upstream
  • EUVD-2017-3141
    Upstream
  • EUVD-2017-3142
    Upstream
  • EUVD-2017-3143
    Upstream
  • EUVD-2017-3144
    Upstream
  • EUVD-2017-3145
    Upstream
  • EUVD-2017-3146
    Upstream
  • EUVD-2017-3147
    Upstream
  • EUVD-2017-3148
    Upstream
  • EUVD-2017-3149
    Upstream
  • EUVD-2017-3150
    Upstream
  • EUVD-2017-3151
    Upstream
  • EUVD-2017-3153
    Upstream
  • EUVD-2017-3155
    Upstream
  • EUVD-2017-3251
    Upstream
  • EUVD-2017-3252
    Upstream
  • EUVD-2017-3256
    Upstream
  • EUVD-2017-3334
    Upstream
  • EUVD-2017-3361
    Upstream
  • EUVD-2017-3362
    Upstream
  • EUVD-2017-3724
    Upstream
  • EUVD-2017-3991
    Upstream
  • EUVD-2017-4000
    Upstream
  • EUVD-2017-4001
    Upstream
  • EUVD-2017-4002
    Upstream
  • EUVD-2017-4003
    Upstream
  • EUVD-2017-4004
    Upstream
  • EUVD-2017-4005
    Upstream
  • EUVD-2017-4006
    Upstream
  • EUVD-2017-4008
    Upstream
  • EUVD-2017-4135
    Upstream
  • EUVD-2017-4136
    Upstream
  • EUVD-2017-4137
    Upstream
  • EUVD-2017-4138
    Upstream
  • EUVD-2017-4158
    Upstream
  • EUVD-2017-4179
    Upstream
  • EUVD-2017-4180
    Upstream
  • EUVD-2017-4181
    Upstream
  • EUVD-2017-4182
    Upstream
  • EUVD-2017-4193
    Upstream
  • EUVD-2017-4203
    Upstream
  • EUVD-2017-4204
    Upstream
  • EUVD-2017-4207
    Upstream
  • EUVD-2017-4209
    Upstream
  • EUVD-2017-4213
    Upstream
  • EUVD-2017-4214
    Upstream
  • EUVD-2017-4215
    Upstream
  • EUVD-2017-4401
    Upstream
  • EUVD-2017-4501
    Upstream
  • EUVD-2017-4650
    Upstream
  • EUVD-2017-4651
    Upstream
  • EUVD-2017-4656
    Upstream
  • EUVD-2017-4659
    Upstream
  • EUVD-2017-4660
    Upstream
  • EUVD-2017-4661
    Upstream
  • EUVD-2017-4663
    Upstream
  • EUVD-2017-5175
    Upstream
Scan your project

Continuously monitor your dependencies and get alerted when vulnerabilities like this one affect your stack.

Checkout DevGuard