Approved changes feed: RSS · Atom

cpe:2.3:a:imagemagick:imagemagick:7.0.5-10:*:*:*:*:*:*:*

part: a version: 7.0.5-10 update: *

VendorImagemagick (32d6d751-1860-57ab-a9e9-dc7f7c883682)
ProductImagemagick (fa9ea99f-9ea8-56c5-9f62-fd314777f530)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/imagemagick/imagemagick purl2cpe 2026-06-01 10:15:27.479338
pkg:imagemagick/imagemagick purl2cpe 2026-06-01 10:15:27.479339

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-13658 vulnerable 2026-06-08 05:08:48.687544 Details available
In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exit) in the DestroyImageInfo function in MagickCore/image.c.
Published: 2017-08-24T06:00:00.000Z
Updated: 2024-08-05T19:05:19.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-13142 vulnerable 2026-06-08 05:08:48.493077 Details available
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files.
Published: 2017-08-23T06:00:00.000Z
Updated: 2024-08-05T18:58:12.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-13141 vulnerable 2026-06-08 05:08:48.491428 Details available
In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c.
Published: 2017-08-23T06:00:00.000Z
Updated: 2024-08-05T18:58:12.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-13140 vulnerable 2026-06-08 05:08:48.489845 Details available
In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial of service (application hang in LockSemaphoreInfo) via a PNG file with a width equal to MAGICK_WIDTH_LIMIT.
Published: 2017-08-23T06:00:00.000Z
Updated: 2024-08-05T18:58:12.286Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-13139 vulnerable 2026-06-08 05:08:48.488139 Details available
In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.
Published: 2017-08-23T06:00:00.000Z
Updated: 2024-08-05T18:58:12.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12427 vulnerable 2026-06-08 05:08:46.944810 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11724 vulnerable 2026-06-08 05:08:38.356122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11530 vulnerable 2026-06-08 05:08:38.064199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11529 vulnerable 2026-06-08 05:08:38.062016 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11528 vulnerable 2026-06-08 05:08:38.060357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11527 vulnerable 2026-06-08 05:08:38.058813 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11526 vulnerable 2026-06-08 05:08:38.057051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11524 vulnerable 2026-06-08 05:08:38.053861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11505 vulnerable 2026-06-08 05:08:37.961015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11478 vulnerable 2026-06-08 05:08:37.862793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.