222 results · Feed
-
Medium 5.9
ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems
ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32, an integer overflow vulnerability exists in the BMP decoder on 32-bit systems. The vulnerability o…
-
High 7.5
ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2 for ImageMagick's 32-bit build, a 32-bit integer overflow in the BMP encoder’s scanline-stride computation collapses bytes_p…
-
High 7.5
ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed…
-
Low 3.7
ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-28 and 7.1.2-2, passing a geometry string containing only a colon (":") to montage -geometry leads GetGeometry() to set width/height to 0. …
-
High 7.4
ImageMagick has Stack Buffer Overflow in image.c
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick mogrify` command, specifying multiple consecutive `%d` format specifiers in a filename template…
-
Low 3.7
ImageMagick has Memory Leak in magick stream
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick stream` command, specifying multiple consecutive `%d` format specifiers in a filename template …
-
Low 3.7
ImageMagick has Heap Buffer Overflow in InterpretImageFilename
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the `InterpretImageFilename` function. The issue stems from an off-by-one error that causes o…
-
Medium 6.2
Imagemagick: heap use-after-free in coders/bmp.c
A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.
-
Medium 6.5
ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert pro…
-
Medium 6.5
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the result…
-
Unscored —
A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could le…
-
Unscored —
A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulner…
-
Unscored —
A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vuln…
-
Unscored —
A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detect…
-
Unscored —
An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c.…
-
Medium 5.5
In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/ope…
-
Unscored —
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' …
-
Unscored —
In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'fl…
-
Unscored —
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' …
-
Unscored —
ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
-
Unscored —
A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm.c file. This vulnerability is…
-
Unscored —
A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg…
-
Medium 4.4
Issue when Configuring the ImageMagick Security Policy
ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read …
-
Unscored —
A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage() in the Magi…
-
Unscored —
A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/…
-
Unscored —
A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of…
-
Unscored —
A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in Tra…
-
Unscored —
A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnai…
-
Unscored —
A heap based buffer overflow in coders/tiff.c may result in program crash and denial of service in ImageMagick before 7…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by Ima…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by I…
-
Unscored —
A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagic…
-
Unscored —
A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processe…
-
Unscored —
A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagi…
-
Unscored —
A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submi…
-
Unscored —CVE-2020-29599 Public exploit
ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a passw…
-
Unscored —
Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.
-
Unscored —
ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c, which may cause a denial of…
-
Unscored —
ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c dur…
-
Unscored —
In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c…