Advisories · Technology
ImageMagick.
Every CVE that names ImageMagick among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG Decoder
- ImageMagick
- Denial of service
- CVSS 4.8 Medium
ImageMagick before 7.1.2-34 Heap Buffer Overflow via -morph Option
- ImageMagick
- Memory corruption
- CVSS 6.3 Medium
ImageMagick before 7.1.2-34 Stack Overflow in TIFF Decoder
- ImageMagick
- Denial of service
- CVSS 4.8 Medium
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Heap Buffer Overflow via X11 Animate
- ImageMagick
- Memory corruption
- CVSS 4.8 Medium
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option
- ImageMagick
- Denial of service
- CVSS 2.0 Low
ImageMagick before 7.1.2-33 Memory Leak in magick compare
- ImageMagick
- Denial of service
- CVSS 4.8 Medium
ImageMagick before 7.1.2-33 Memory Leak in PerlMagick Property Reading
- ImageMagick
- Denial of service
- CVSS 4.8 Medium
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option
- ImageMagick
- Denial of service
- CVSS 6.9 Medium
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via Crafted XMP Profile
- ImageMagick
- Denial of service
- CVSS 6.9 Medium
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Limit
- ImageMagick
- Denial of service
- CVSS 2.0 Low
ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit
- ImageMagick
- Memory corruption
- CVSS 6.9 Medium
ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path
- ImageMagick
- Denial of service
- CVSS 6.3 Medium
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder
- ImageMagick
- Denial of service
- CVSS 2.3 Low
ImageMagick before 7.1.2-33 Memory Leak in FPX Encoder
- ImageMagick
- Denial of service
- CVSS 7.2 High
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images
- ImageMagick
- Memory corruption
- CVSS 4.8 Medium
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Code Injection via MVG Encoder Drawing Options
- ImageMagick
- Cross-site scripting (XSS)
- CVSS 6.3 Medium
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Decoder
- ImageMagick
- Memory corruption
- CVSS 6.3 Medium
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in MSL Decoder
- ImageMagick
- Denial of service
- CVSS 1.8 Low
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix
- ImageMagick
- CWE-693
- CVSS 4.8 Medium
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Overflow via MVG Decoder
- ImageMagick
- Denial of service
- CVSS 4.8 Medium
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders
- ImageMagick
- Denial of service
- CVSS 4.8 Medium
ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box
- ImageMagick
- Memory corruption
- CVSS 6.9 Medium
ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder
- ImageMagick
- Denial of service
- CVSS 4.8 Medium
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass via Delegate Invocation Parsing
- ImageMagick
- Broken access control
- CVSS 6.3 Medium
ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder
- ImageMagick
- Memory corruption
- CVSS 2.0 Low
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML Encoders
- ImageMagick
- Memory corruption
- CVSS 4.8 Medium
ImageMagick 7.1.0-21 before 7.1.2-32 Heap Buffer Over-Read via -fx Option
- ImageMagick
- Memory corruption
- CVSS 2.0 Low
ImageMagick 7.1.0-20 before 7.1.2-32 Use After Free via -fx Option
- ImageMagick
- Memory corruption
- CVSS 2.0 Low
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Heap Buffer Overflow via Concurrent Security Policy Access
- ImageMagick
- Race condition
- CVSS 6.3 Medium
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in Wavelet-Denoise Operation
- ImageMagick
- Denial of service
- CVSS 4.8 Medium
ImageMagick before 7.1.2-32 Policy Bypass via -script Operation
- ImageMagick
- Denial of service
- CVSS 6.9 Medium
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Temporary File Leak in JNG Decoder
- ImageMagick
- CWE-459
- CVSS 6.3 Medium
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder
- ImageMagick
- Other injection
- CVSS 2.0 Low
ImageMagick before 7.1.2-32 TOCTOU Symlink Race Path Policy Bypass via magick script
- ImageMagick
- Path traversal
- CVSS 6.9 Medium
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in PostScript Decoder
- ImageMagick
- Memory corruption
- CVSS 6.3 Medium
ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder
- ImageMagick
- Memory corruption
- CVSS 6.3 Medium
ImageMagick 7.1.2-30 before 7.1.2-32 Use After Free in WBINFO Decoder
- ImageMagick
- Memory corruption
- CVSS 4.8 Medium
ImageMagick before 7.1.2-32 Memory Leak via -process Option
- ImageMagick
- Denial of service
- CVSS 6.9 Medium
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure via JPEG Decoder
- ImageMagick
- Memory corruption
- CVSS 6.3 Medium
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Use After Free in PDF Writer via JPEG2000
- ImageMagick
- Memory corruption
- CVSS 6.9 Medium
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MSL Decoder
- ImageMagick
- Denial of service
- CVSS 6.9 Medium
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 XML Injection via CIP Encoder
- ImageMagick
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
ImageMagick 7.1.1-7 before 7.1.2-32 Heap Buffer Over-Read via XMP Profile
- ImageMagick
- Memory corruption
- CVSS 6.3 Medium
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Stack Overflow in MVG Decoder
- ImageMagick
- Denial of service
- CVSS 6.3 Medium
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in YUV Encoder
- ImageMagick
- Denial of service
- CVSS 6.9 Medium
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in SVG Encoder
- ImageMagick
- Denial of service
- CVSS 6.3 Medium
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in GIF Encoder
- ImageMagick
- Denial of service
- CVSS 6.3 Medium
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in PNG Encoder
- ImageMagick
- Denial of service
- CVSS 6.9 Medium
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in TGA Decoder
- ImageMagick
- Information disclosure
- CVSS 2.0 Low
ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation
- ImageMagick
- Memory corruption
- CVSS 2.0 Low
ImageMagick before 7.1.2-33 Policy Bypass via Symlink in IsRightsAuthorizedByName
- ImageMagick
- Path traversal
- CVSS 7.3 High
ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate
- ImageMagick
- CWE-427
- CVSS 5.3 Medium
ImageMagick: Policy Bypass in MAT decoder when reading highly compressed data
- ImageMagick
- CWE-409
- CVSS 5.9 Medium
ImageMagick: Use-After-Free in RSVG decoder that is build without cairo support
- ImageMagick
- Memory corruption
- CVSS 5.3 Medium
ImageMagick: Denial of service with crafted XMP profile
- ImageMagick
- Denial of service
- CVSS 4.0 Medium
ImageMagick: Policy Bypass in CUT encoder
- ImageMagick
- Broken access control
- Denial of service
- CVSS 6.2 Medium
ImageMagick: Policy Bypass when using coder as the domain.
- ImageMagick
- CWE-551
- CVSS 5.9 Medium
ImageMagick: Invalid Memory Free in MVG decoder
- ImageMagick
- CWE-590
- CVSS 5.3 Medium
ImageMagick: Code Injection in the postscript coders
- ImageMagick
- Code injection
- CVSS 5.3 Medium
ImageMagick: Denial of service possible when parsing an XMP profile.
- ImageMagick
- Denial of service