The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.
Base Score: 7.5
Impact Score: 6.4
Exploitability Score: 10
Base Score: 9.8
Impact Score: 5.9
Exploitability Score: 3.9
|105455||openSUSE Security Update : ImageMagick (openSUSE-2017-1413)||Nessus||SuSE Local Security Checks|
|105409||SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2017:3388-1)||Nessus||SuSE Local Security Checks|
|104515||GLSA-201711-07 : ImageMagick: Multiple vulnerabilities||Nessus||Gentoo Local Security Checks|