Known vulnerabilities in ImageMagick - page 22

Software: ImageMagick
Software CPE: cpe:2.3:a:imagemagick_org:imagemagick:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 536
Public exploits: 11
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ImageMagick ImageMagick is affected by 536 known vulnerabilities: 1 critical, 84 high, 282 medium, 169 low Critical High Medium Low

Vulnerabilities (536)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU38438 - Missing release of memory after effective lifetime
CVE-2017-13146
CWE-401 High
No
No
- 23.08.2017 SB2017060236
#VU38678 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-11446
CWE-835 Medium
No
No
- 19.07.2017 SB2017071312
#VU38690 - Improper input validation
CVE-2017-11360
CWE-20 Medium
No
No
- 17.07.2017 SB2017071312
#VU38714 - Improper input validation
CVE-2017-11310
CWE-20 High
No
No
- 13.07.2017 SB2017071312
#VU38716 - Improper input validation
CVE-2017-11170
CWE-20 High
No
No
- 11.07.2017 SB2017052916
#VU38717 - Improper input validation
CVE-2017-11166
CWE-20 Medium
No
No
- 10.07.2017 SB2017052916
SB2023082360
SB2023082361
and 5 more
#VU38718 - Improper input validation
CVE-2017-11141
CWE-20 Medium
No
No
- 10.07.2017 SB2017052916
#VU38885 - Reachable Assertion
CVE-2017-9499
CWE-617 Medium
No
No
- 07.06.2017 SB2017060712
#VU38886 - Reachable Assertion
CVE-2017-9501
CWE-617 Medium
No
No
- 07.06.2017 SB2017060712
SB2017082819
SB2017081732
and 1 more
#VU38925 - Improper input validation
CVE-2017-9405
CWE-20 Medium
No
No
- 02.06.2017 SB2017060236
#VU38926 - Improper input validation
CVE-2017-9407
CWE-20 Medium
No
No
- 02.06.2017 SB2017060236
#VU38927 - Improper input validation
CVE-2017-9409
CWE-20 Medium
No
No
- 02.06.2017 SB2017060236
#VU6838 - Reachable Assertion
CVE-2017-9142
CWE-617 Low
No
No
- 30.05.2017 SB2017053006
SB2017053007
SB2017053010
#VU6789 - Heap-based Buffer Overflow
CVE-2017-5508
CWE-122 Low
No
No
- 29.05.2017 SB2017052907
#VU6788 - Memory corruption
CVE-2017-5507
CWE-119 Low
No
No
- 29.05.2017 SB2017052907
#VU6787 - NULL Pointer Dereference
CVE-2017-6497
CWE-476 Low
No
No
- 29.05.2017 SB2017052907
#VU38934 - Improper input validation
CVE-2017-9261
CWE-20 Medium
No
No
- 29.05.2017 SB2017052916
#VU38935 - Improper input validation
CVE-2017-9262
CWE-20 Medium
No
No
- 29.05.2017 SB2017052916
#VU6837 - Reachable Assertion
CVE-2017-9141
CWE-617 Low
No
No
- 26.05.2017 SB2017053006
SB2017053007
SB2017053010
#VU6615 - Missing release of memory after effective lifetime
CVE-2017-8346
CWE-401 Low
No
No
- 22.05.2017 SB2017052205
SB2017053007
SB2017053010


Showing elements 421 - 440 out of 536