Known vulnerabilities in ImageMagick - page 18

Software: ImageMagick
Software CPE: cpe:2.3:a:imagemagick_org:imagemagick:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 536
Public exploits: 11
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ImageMagick ImageMagick is affected by 536 known vulnerabilities: 1 critical, 84 high, 282 medium, 169 low Critical High Medium Low

Vulnerabilities (536)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12271 - Resource exhaustion
CVE-2017-12691
CWE-400 Low
No
No
- 27.04.2018 SB2017083004
SB2018010545
SB2018010437
#VU12272 - Missing release of memory after effective lifetime
CVE-2017-14343
CWE-401 Low
No
No
- 16.04.2018 SB2017083004
SB2018010545
SB2018010437
#VU38277 - Use After Free
CVE-2017-14528
CWE-416 Medium
No
No
- 18.09.2017 SB2017091818
#VU38296 - NULL Pointer Dereference
CVE-2017-14400
CWE-476 Medium
No
No
- 12.09.2017 SB2017091243
#VU38298 - Missing release of memory after effective lifetime
CVE-2017-14324
CWE-401 Medium
No
No
- 12.09.2017 SB2017091243
#VU38331 - Out-of-bounds read
CVE-2017-14248
CWE-125 Medium
No
No
- 11.09.2017 SB2017082320
#VU38332 - Divide By Zero
CVE-2017-14249
CWE-369 Medium
No
No
- 11.09.2017 SB2017082320
#VU38342 - Heap-based Buffer Overflow
CVE-2017-14224
CWE-122 High
No
No
- 09.09.2017 SB2017082320
#VU38356 - Improper input validation
CVE-2017-14174
CWE-20 Medium
No
No
- 07.09.2017 SB2017090730
SB2018010545
SB2018010437
#VU38361 - Improper input validation
CVE-2017-14139
CWE-20 Medium
No
No
- 05.09.2017 SB2017080503
SB2019123157
SB2019123158
#VU46328 - NULL Pointer Dereference
CVE-2017-14060
CWE-476 Low
No
No
7.0.7-0 31.08.2017 SB2017091824
#VU8046 - Heap-based Buffer Overflow
CVE-2017-13758
CWE-122 High
No
No
- 30.08.2017 SB2017083004
SB2018063002
#VU38395 - Allocation of Resources Without Limits or Throttling
CVE-2017-12875
CWE-770 Medium
No
No
- 29.08.2017 SB2017082210
#VU38429 - Reachable Assertion
CVE-2017-13658
CWE-617 Medium
No
No
- 24.08.2017 SB2017080503
#VU38437 - Improper input validation
CVE-2017-13145
CWE-20 Medium
No
No
- 23.08.2017 SB2017082322
#VU38439 - Missing release of memory after effective lifetime
CVE-2017-13131
CWE-401 Medium
No
No
- 23.08.2017 SB2017082320
#VU38440 - Reachable Assertion
CVE-2017-13132
CWE-617 Medium
No
No
- 23.08.2017 SB2017082320
#VU38441 - Allocation of Resources Without Limits or Throttling
CVE-2017-13133
CWE-770 Medium
No
No
- 23.08.2017 SB2017082320
#VU38444 - Missing release of memory after effective lifetime
CVE-2017-13059
CWE-401 Medium
No
No
- 22.08.2017 SB2017082210
#VU38447 - Missing release of memory after effective lifetime
CVE-2017-13062
CWE-401 Medium
No
No
- 22.08.2017 SB2017082210
SB2018010545
SB2018010437


Showing elements 341 - 360 out of 536