PatchTheCVE: libfpx projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-6876: The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other prohttps://patchthecve.com/cve/CVE-2018-6876.htmlhttps://patchthecve.com/cve/CVE-2018-6876.htmlWed, 17 Jun 2026 02:02:24 +0000MEDIUM 6.5: The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers to cause a denial of service (stack-based buffer under-read) via a crafted bmp image.CVE-2017-12925: Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denhttps://patchthecve.com/cve/CVE-2017-12925.htmlhttps://patchthecve.com/cve/CVE-2017-12925.htmlWed, 17 Jun 2026 01:04:09 +0000MEDIUM 6.5: Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted fpx image.CVE-2017-12924: CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (dhttps://patchthecve.com/cve/CVE-2017-12924.htmlhttps://patchthecve.com/cve/CVE-2017-12924.htmlWed, 17 Jun 2026 01:04:08 +0000MEDIUM 6.5: CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted fpx image.CVE-2017-12923: OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of servichttps://patchthecve.com/cve/CVE-2017-12923.htmlhttps://patchthecve.com/cve/CVE-2017-12923.htmlWed, 17 Jun 2026 01:04:08 +0000MEDIUM 6.5: OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.CVE-2017-12922: wchar.c in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) viahttps://patchthecve.com/cve/CVE-2017-12922.htmlhttps://patchthecve.com/cve/CVE-2017-12922.htmlWed, 17 Jun 2026 01:04:08 +0000MEDIUM 6.5: wchar.c in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.CVE-2017-12921: PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a https://patchthecve.com/cve/CVE-2017-12921.htmlhttps://patchthecve.com/cve/CVE-2017-12921.htmlWed, 17 Jun 2026 01:04:08 +0000MEDIUM 6.5: PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.CVE-2017-12920: CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NUhttps://patchthecve.com/cve/CVE-2017-12920.htmlhttps://patchthecve.com/cve/CVE-2017-12920.htmlWed, 17 Jun 2026 01:04:08 +0000MEDIUM 6.5: CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.CVE-2017-12919: Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackehttps://patchthecve.com/cve/CVE-2017-12919.htmlhttps://patchthecve.com/cve/CVE-2017-12919.htmlWed, 17 Jun 2026 01:04:08 +0000MEDIUM 6.5: Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted fpx image.