{"id":"CVE-2018-9018","aliases":["ALPINE-CVE-2018-9018","DEBIAN-CVE-2018-9018","DLA-1322-1","DLA-1456-1","DSA-4321-1","EUVD-2018-20623","GHSA-4w24-2qm8-wfcm","MGASA-2018-0285","SUSE-SU-2018:1036-1","SUSE-SU-2018:1129-1","SUSE-SU-2018:1178-1","UBUNTU-CVE-2018-9018","USN-5974-1"],"status":"published","title":"In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c....","description":"In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03022,"percentile":0.87544,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-369"],"published":"2018-03-25T21:00:00Z","modified":"2026-11-03T06:31:32Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"graphicsmagick","fixed_in":["1.3.29-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"graphicsmagick","fixed_in":["1.3.28-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"graphicsmagick","fixed_in":["1.3.28-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"graphicsmagick","fixed_in":["1.3.28-2"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"imagemagick","fixed_in":["6.9.10.0-1.mga6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"graphicsmagick","fixed_in":["1.3.18-1ubuntu3.1+esm8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"graphicsmagick","fixed_in":["1.3.23-1ubuntu0.6+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"graphicsmagick","fixed_in":["1.3.28-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.29-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.28-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.28-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.28-2"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.16-1.1+deb7u19"}]}],"versions":["1.3.16-1.1","1.3.16-1.1+deb7u1","1.3.16-1.1+deb7u10","1.3.16-1.1+deb7u11","1.3.16-1.1+deb7u12","1.3.16-1.1+deb7u13","1.3.16-1.1+deb7u14","1.3.16-1.1+deb7u15","1.3.16-1.1+deb7u16","1.3.16-1.1+deb7u17","1.3.16-1.1+deb7u18","1.3.16-1.1+deb7u2","1.3.16-1.1+deb7u3","1.3.16-1.1+deb7u4","1.3.16-1.1+deb7u5","1.3.16-1.1+deb7u6","1.3.16-1.1+deb7u7","1.3.16-1.1+deb7u8","1.3.16-1.1+deb7u9"],"bundled":6},{"source":"osv","ecosystem":"Debian:8","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.20-3+deb8u4"}]}],"versions":["1.3.20-3+deb8u1","1.3.20-3+deb8u2","1.3.20-3+deb8u3"],"bundled":31},{"source":"osv","ecosystem":"Debian:9","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.30+hg15796-1~deb9u1"}]}],"versions":["1.3.25-8","1.3.26-1","1.3.26-10","1.3.26-11","1.3.26-12","1.3.26-13","1.3.26-14","1.3.26-15","1.3.26-16","1.3.26-17","1.3.26-18","1.3.26-19","1.3.26-2","1.3.26-3","1.3.26-4","1.3.26-5","1.3.26-6","1.3.26-7","1.3.26-8","1.3.26-9","1.3.27-1","1.3.27-2","1.3.27-3","1.3.27-4","1.3.28-1","1.3.28-2","1.3.29+hg15665-1","1.3.29-1","1.3.30-1"],"bundled":56},{"source":"osv","ecosystem":"Mageia:6","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.0-1.mga6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-78.47.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"GraphicsMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-78.47.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.45.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.45.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.3.6-78.45.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.54.5"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.54.5"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.54.5"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.54.5"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.54.5"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.18-1ubuntu3.1+esm8"}]}],"versions":["1.3.16-1.1ubuntu2","1.3.16-1.1ubuntu3","1.3.18-1ubuntu3","1.3.18-1ubuntu3.1","1.3.18-1ubuntu3.1+esm1","1.3.18-1ubuntu3.1+esm2","1.3.18-1ubuntu3.1+esm3","1.3.18-1ubuntu3.1+esm4","1.3.18-1ubuntu3.1+esm5","1.3.18-1ubuntu3.1+esm6","1.3.18-1ubuntu3.1+esm7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.23-1ubuntu0.6+esm2"}]}],"versions":["1.3.21-3","1.3.23-1","1.3.23-1build1","1.3.23-1ubuntu0.1","1.3.23-1ubuntu0.1+esm1","1.3.23-1ubuntu0.2","1.3.23-1ubuntu0.3","1.3.23-1ubuntu0.4","1.3.23-1ubuntu0.5","1.3.23-1ubuntu0.6","1.3.23-1ubuntu0.6+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.28-2"}]}],"versions":["1.3.26-15","1.3.26-16","1.3.26-19","1.3.27-1","1.3.27-2","1.3.27-3","1.3.28-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.18-1ubuntu3.1+esm8"}]}],"versions":["1.3.16-1.1ubuntu2","1.3.16-1.1ubuntu3","1.3.18-1ubuntu3","1.3.18-1ubuntu3.1","1.3.18-1ubuntu3.1+esm1","1.3.18-1ubuntu3.1+esm2","1.3.18-1ubuntu3.1+esm3","1.3.18-1ubuntu3.1+esm4","1.3.18-1ubuntu3.1+esm5","1.3.18-1ubuntu3.1+esm6","1.3.18-1ubuntu3.1+esm7"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.23-1ubuntu0.6+esm2"}]}],"versions":["1.3.21-3","1.3.23-1","1.3.23-1build1","1.3.23-1ubuntu0.1","1.3.23-1ubuntu0.1+esm1","1.3.23-1ubuntu0.2","1.3.23-1ubuntu0.3","1.3.23-1ubuntu0.4","1.3.23-1ubuntu0.5","1.3.23-1ubuntu0.6","1.3.23-1ubuntu0.6+esm1"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.28-2ubuntu0.2+esm1"}]}],"versions":["1.3.26-15","1.3.26-16","1.3.26-19","1.3.27-1","1.3.27-2","1.3.27-3","1.3.28-1","1.3.28-2","1.3.28-2ubuntu0.1","1.3.28-2ubuntu0.1+esm1","1.3.28-2ubuntu0.2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"graphicsmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4+really1.3.35-1ubuntu0.1"}]}],"versions":["1.4+really1.3.33+hg16115-1","1.4+really1.3.33+hg16115-1build1","1.4+really1.3.33+hg16117-1","1.4+really1.3.34-1","1.4+really1.3.34-2","1.4+really1.3.34+hg16181-1","1.4+really1.3.35-1"],"bundled":7}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"graphicsmagick","product":"graphicsmagick"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2018/03/msg00025.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4321","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://sourceforge.net/p/graphicsmagick/bugs/554/","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/08/msg00002.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/103526","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3IYH7QSNXXOIDFTYLY455ANZ3JWQ7FCS/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FS76VNCFL3FVRMGXQEMHBOKA7EE46BTS/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9018"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3IYH7QSNXXOIDFTYLY455ANZ3JWQ7FCS/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FS76VNCFL3FVRMGXQEMHBOKA7EE46BTS/"},{"url":"https://github.com/advisories/GHSA-4w24-2qm8-wfcm"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-9018","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-9018","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0285.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23156","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2018-05/msg00026.html","tags":["web"]},{"url":"https://www.debian.org/security/2018/dsa-4204","tags":["web"]},{"url":"https://usn.ubuntu.com/3681-1/","tags":["web"]},{"url":"https://legacy.imagemagick.org/script/changelog.php","tags":["web"]},{"url":"https://github.com/ImageMagick/ImageMagick/issues/1133","tags":["report"]},{"url":"https://github.com/ImageMagick/ImageMagick/issues/1156","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181036-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1086773","tags":["report"]},{"url":"https://bugzilla.suse.com/1087027","tags":["report"]},{"url":"https://bugzilla.suse.com/1087037","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9018","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181129-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047356","tags":["report"]},{"url":"https://bugzilla.suse.com/1086782","tags":["report"]},{"url":"https://bugzilla.suse.com/1087033","tags":["report"]},{"url":"https://bugzilla.suse.com/1089781","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-1000476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10928","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8960","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181178-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1058635","tags":["report"]},{"url":"https://bugzilla.suse.com/1074117","tags":["report"]},{"url":"https://bugzilla.suse.com/1087039","tags":["report"]},{"url":"https://bugzilla.suse.com/1087825","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-17887","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9135","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-9018","tags":["report"]},{"url":"http://hg.graphicsmagick.org/hg/GraphicsMagick/rev/84040fada1ee","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5974-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-9018","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-5685","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20184","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20189","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-11006","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-12672","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1270","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-9018","description":"In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.","status":"published","published":"2018-03-25T21:00:00Z","modified":"2024-08-05T07:10:47.354Z","updated_at":"2026-11-02T14:35:02.603326Z"}],"euvd":[{"id":"EUVD-2018-20623","description":"In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.","status":"published","published":"2018-03-25T21:00:00Z","modified":"2024-08-05T07:10:47Z","updated_at":"2026-11-03T02:40:00.889185Z"}],"ghsa":[{"id":"GHSA-4w24-2qm8-wfcm","title":"In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c....","description":"In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.","status":"published","published":"2022-05-13T01:28:57Z","modified":"2023-02-01T05:08:05Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:50:40.636216Z"}],"nvd":[{"id":"CVE-2018-9018","description":"In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.","status":"published","published":"2018-03-25T21:29:00.25Z","modified":"2026-06-17T02:05:49.423Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-369"],"updated_at":"2026-11-02T14:04:24.700429Z"}],"osv":[{"id":"ALPINE-CVE-2018-9018","description":"In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.","status":"published","published":"2018-03-25T21:29:00.25Z","modified":"2026-11-03T06:31:32.120854832Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:18:23.800469Z"},{"id":"CVE-2018-9018","description":"In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.","status":"published","published":"2018-03-25T21:29:00.25Z","modified":"2026-04-16T06:21:22.24286285Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:10.051046Z"},{"id":"DEBIAN-CVE-2018-9018","description":"In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.","status":"published","published":"2018-03-25T21:29:00.25Z","modified":"2026-10-23T18:03:09.87882879Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:31.170944Z"},{"id":"UBUNTU-CVE-2018-9018","description":"In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulnerability to cause a crash and denial of service via a crafted mng file.","status":"published","published":"2018-03-25T21:29:00Z","modified":"2026-04-22T12:04:54.797877Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:18.772093Z"},{"id":"DLA-1322-1","title":"graphicsmagick - security update","status":"published","published":"2018-03-28T00:00:00Z","modified":"2026-03-09T01:02:01.263642Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-1456-1","title":"graphicsmagick - security update","status":"published","published":"2018-08-02T00:00:00Z","modified":"2026-03-09T01:01:52.904399Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4321-1","title":"graphicsmagick - security update","status":"published","published":"2018-10-16T00:00:00Z","modified":"2026-03-09T02:11:06.805314Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0285","title":"Updated imagemagick packages fix security vulnerability","description":"Imagemagick has been updated to version 6.9.10.0 to fix several bugs and\npossible security issues.\n\n- Fixed numerous use of uninitialized values, integer overflow, memory\n  exceeded, and timeouts\n- Missing break when checking \"compliance\" element.\n- Fixed errant 'not enough pixel data'\n- Fixed memory corruption for MVG paths\n- A SVG rectangle with a width and height of 1, is a point\n- Properly initialize SVG color style\n- Heap buffer overflow fix\n","status":"published","published":"2018-06-16T09:28:36Z","modified":"2026-04-16T06:24:55.445465207Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2018:1036-1","title":"Security update for GraphicsMagick","description":"This update for GraphicsMagick fixes the following issues:\n\n- security update (png.c)\n * CVE-2018-9018: divide-by-zero in the ReadMNGImage function of coders/png.c. \n    Attackers could leverage this vulnerability to cause a crash and denial of service \n    via a crafted mng file. [bsc#1086773]\n\n- security update (gif.c)\n * CVE-2017-18254: A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, \n    which could lead to  denial of service via a crafted file. [bsc#1087027]\n\n\n- security update (pcd.c)\n * CVE-2017-18251: A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, \n    which could lead to a denial of service via a crafted file. [bsc#1087037]\n  ","status":"published","published":"2018-04-20T13:27:11Z","modified":"2026-02-04T04:04:19.323099Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:1129-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n\n- security update (png.c)\n  * CVE-2018-9018: divide-by-zero in the ReadMNGImage function of coders/png.c. \n    Attackers could leverage this vulnerability to cause a crash and denial of service \n    via a crafted mng file. [bsc#1086773]\n  * CVE-2018-10177: there is an infinite loop in the ReadOneMNGImagefunction of the coders/png.c file. Remote attackers could leverage thisvulnerability to cause a denial of service (bsc#1089781)\n\n- security update (wand)\n  * CVE-2017-18252: The MogrifyImageList function in MagickWand/mogrify.c could allow \n    attackers to cause a denial of service via a crafted file. [bsc#1087033]\n\n- security update (gif.c)\n  * CVE-2017-18254: A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, \n    which could lead to  denial of service via a crafted file. [bsc#1087027]\n\n- security update (core)\n  * CVE-2017-10928: a heap-based buffer over-read in the GetNextToken function in token.c \n    could allow attackers to obtain sensitive information from process memory or possibly have \n    unspecified other impact via a crafted SVG document that is mishandled in the \n    GetUserSpaceCoordinateValue function in coders/svg.c. [bsc#1047356]\n\n- security update (pcd.c)\n  * CVE-2017-18251: A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, \n    which could lead to a denial of service via a crafted file. [bsc#1087037]\n\n- security update (gif.c)\n  * CVE-2017-18254: A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which could lead to denial of service via a crafted file. [bsc#1087027]\n\n- security update (tiff.c)\n  * CVE-2018-8960: The ReadTIFFImage function in coders/tiff.c in ImageMagick memory allocation issue could lead to denial of service (bsc#1086782)\n\n\n\n","status":"published","published":"2018-05-02T13:50:19Z","modified":"2026-02-04T03:43:49.336245Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:1178-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2017-14325: In ImageMagick, a memory leak vulnerability was found in\n  the function PersistPixelCache in magick/cache.c, which allowed attackers\n  to cause a denial of service (memory consumption in ReadMPCImage in\n  coders/mpc.c) via a crafted file.  [bsc#1058635]\n- CVE-2017-17887: In ImageMagick, a memory leak vulnerability was found\n  in the function GetImagePixelCache in magick/cache.c, which allowed\n  attackers to cause a denial of service via a crafted MNG image file that\n  is processed by ReadOneMNGImage.  [bsc#1074117]\n- CVE-2017-18250: A NULL pointer dereference vulnerability was found in the function \n  LogOpenCLBuildFailure in MagickCore/opencl.c, which could lead to a denial of service \n  via a crafted file. [bsc#1087039]\n- CVE-2017-18251: A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, \n  which could lead to a denial of service via a crafted file. [bsc#1087037]\n- CVE-2017-18252: The MogrifyImageList function in MagickWand/mogrify.c could allow \n  attackers to cause a denial of service via a crafted file. [bsc#1087033]\n- CVE-2017-18254: A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, \n  which could lead to  denial of service via a crafted file. [bsc#1087027]\n- CVE-2018-8960: The ReadTIFFImage function in coders/tiff.c in\n  ImageMagick did not properly restrict memory allocation, leading to a\n  heap-based buffer over-read.  [bsc#1086782]\n- CVE-2018-9018: divide-by-zero in the ReadMNGImage function of coders/png.c. \n  Attackers could leverage this vulnerability to cause a crash and denial of service \n  via a crafted mng file. [bsc#1086773]\n- CVE-2018-9135: heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c \n  could lead to denial of service. [bsc#1087825]\n- CVE-2018-10177: In ImageMagick, there was an infinite loop in the\n  ReadOneMNGImage function of the coders/png.c file. Remote attackers\n  could leverage this vulnerability to cause a denial of service via a\n  crafted mng file.  [bsc#1089781]\n- CVE-2017-10928: a heap-based buffer over-read in the GetNextToken function in token.c \n  could allow attackers to obtain sensitive information from process memory or possibly have \n  unspecified other impact via a crafted SVG document that is mishandled in the \n  GetUserSpaceCoordinateValue function in coders/svg.c. [bsc#1047356]\n\n","status":"published","published":"2018-05-09T11:30:27Z","modified":"2026-02-04T04:31:36.451313Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"USN-5974-1","title":"graphicsmagick vulnerabilities","description":"It was discovered that GraphicsMagick was not properly performing bounds\nchecks when processing TGA image files, which could lead to a heap buffer\noverflow. If a user or automated system were tricked into processing a\nspecially crafted TGA image file, an attacker could possibly use this\nissue to cause a denial of service or execute arbitrary code. This issue\nonly affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2018-20184)\n\nIt was discovered that GraphicsMagick was not properly validating bits per\npixel data when processing DIB image files. If a user or automated system\nwere tricked into processing a specially crafted DIB image file, an\nattacker could possibly use this issue to cause a denial of service. This\nissue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n(CVE-2018-20189)\n\nIt was discovered that GraphicsMagick was not properly processing\nbit-field mask values in BMP image files, which could result in the\nexecution of an infinite loop. If a user or automated system were tricked\ninto processing a specially crafted BMP image file, an attacker could\npossibly use this issue to cause a denial of service. This issue only\naffected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2018-5685)\n\nIt was discovered that GraphicsMagick was not properly validating data\nused in arithmetic operations when processing MNG image files, which\ncould result in a divide-by-zero error. If a user or automated system were\ntricked into processing a specially crafted MNG image file, an attacker\ncould possibly use this issue to cause a denial of service. This issue\nonly affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2018-9018)\n\nIt was discovered that GraphicsMagick was not properly performing bounds\nchecks when processing MIFF image files, which could lead to a heap buffer\noverflow. If a user or automated system were tricked into processing a\nspecially crafted MIFF image file, an attacker could possibly use this\nissue to cause a denial of service or expose sensitive information. This\nissue only affected Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n(CVE-2019-11006)\n\nIt was discovered that GraphicsMagick did not properly magnify certain\nMNG image files, which could lead to a heap buffer overflow. If a user or\nautomated system were tricked into processing a specially crafted MNG\nimage file, an attacker could possibly use this issue to cause a denial\nof service or execute arbitrary code. This issue only affected Ubuntu\n20.04 LTS. (CVE-2020-12672)\n\nIt was discovered that GraphicsMagick was not properly performing bounds\nchecks when parsing certain MIFF image files, which could lead to a heap\nbuffer overflow. If a user or automated system were tricked into\nprocessing a specially crafted MIFF image file, an attacker could possibly\nuse this issue to cause a denial of service or execute arbitrary code.\n(CVE-2022-1270)\n","status":"published","published":"2023-03-27T16:40:44Z","modified":"2026-06-29T13:50:50.774034897Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}