Advisories · Technology
ImageMagick.
Every CVE that names ImageMagick among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
ImageMagick: Unclosed file pointer in magick script
- ImageMagick
- CWE-775
- CVSS 5.3 Medium
ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash
- ImageMagick
- Memory corruption
- CVSS 5.3 Medium
ImageMagick: Denial of service in MVG decoder
- ImageMagick
- Denial of service
- CVSS 5.3 Medium
ImageMagick: Stack Overflown CALS decoder due to missing depth check.
- ImageMagick
- Denial of service
- CVSS 5.1 Medium
ImageMagick: Heap Buffer Over-Write in GetVirtualPixels api will result in a crash
- ImageMagick
- Memory corruption
- CVSS 4.3 Medium
ImageMagick: Denial of service in distributed pixel cache server
- ImageMagick
- Denial of service
- CVSS 5.3 Medium
ImageMagick: Denial of service in ASE decoder because of missing security checks
- ImageMagick
- Denial of service
- CVSS 5.3 Medium
ImageMagick: Infinite Loop when reading a crafted XMP profile
- ImageMagick
- Denial of service
- CVSS 5.9 Medium
ImageMagick: Infinite Loop in PSD decoder on 32-bit builds
- ImageMagick
- Denial of service
- CWE-196
- CVSS 4.0 Medium
ImageMagick: Policy Bypass in delegate symlink cleanup due to missing check
- ImageMagick
- CWE-61
- CVSS 5.9 Medium
ImageMagick: Infinite Loop in bzip2 compressed images.
- ImageMagick
- Denial of service
- CVSS 5.3 Medium
ImageMagick: Heap Buffer Over-Write in EXR decoder
- ImageMagick
- Memory corruption
- CVSS 1.8 Low
ImageMagick before 7.1.2-32 and 6.9.13-57 Security Policy Bypass via policy.xml DOCTYPE
- ImageMagick
- CWE-693
- CVSS 6.3 Medium
ImageMagick before 7.1.2-32 and 6.9.13-57 Uninitialized Heap Memory Disclosure in GIF Decoder
- ImageMagick
- Memory corruption
- CVSS 6.3 Medium
ImageMagick before 7.1.2-31 Policy Bypass in UHDR encoder
- ImageMagick
- Denial of service
- CVSS 6.3 Medium
ImageMagick before 7.1.2-31 Division by Zero in FLIF encoder
- ImageMagick
- Denial of service
- CVSS 2.3 Low
ImageMagick before 7.1.2-31 Null Pointer Dereference via PNM
- ImageMagick
- Memory corruption
- CVSS 4.8 Medium
ImageMagick before 7.1.2-31 Policy Bypass via PCD decoder
- ImageMagick
- Denial of service
- CVSS 2.1 Low
ImageMagick before 7.1.2-31 Use After Free via ImagesToBlob
- ImageMagick
- Memory corruption
- CVSS 4.8 Medium
ImageMagick before 7.1.2-30 Heap-use-after-free via Layer
- ImageMagick
- Memory corruption
- CVSS 2.0 Low
ImageMagick before 7.1.2-30 Path Traversal via TOCTOU Symlink Race
- ImageMagick
- Path traversal
- CVSS 4.8 Medium
ImageMagick before 7.1.2-30 Heap-use-after-free via GetList
- ImageMagick
- Memory corruption
- CVSS 1.0 Low
ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race
- ImageMagick
- Path traversal
- CVSS 6.3 Medium
ImageMagick before 7.1.2-30 Memory Leak via MSL decoder
- ImageMagick
- Denial of service
- CVSS 6.3 Medium
ImageMagick before 7.1.2-30 Denial of Service Memory Budget
- ImageMagick
- Denial of service
- CVSS 5.3 Medium
ImageMagick: Heap Buffer Over-Read in BGR decoder due to mising end-of-file check
- ImageMagick
- Memory corruption
- CVSS 5.9 Medium
ImageMagick: Heap Buffer Overflow in ImageMagick MVG decoder
- ImageMagick
- Memory corruption
- CWE-754
- CVSS 4.8 Medium
ImageMagick - Policy Bypass via Incorrect Path Validation
- ImageMagick
- Path traversal
- CVSS 5.5 Medium
ImageMagick: Stack buffer overflow in XTileImage
- ImageMagick
- Memory corruption
- CVSS 6.7 Medium
ImageMagick has a possible stack buffer overflow in sixel encoder
- ImageMagick
- Memory corruption
- CVSS 8.1 High
Heap buffer overflow with attacker-controlled data in XBM parser
- ImageMagick
- Memory corruption
- CVSS 5.3 Medium
ImageMagick converting a malicious MVG file to SVG caused an integer overflow.
- ImageMagick
- Memory corruption
- CVSS 5.5 Medium
ImageMagick: heap-buffer overflow in log colorspace handling
- ImageMagick
- Memory corruption
- CVSS 2.9 Low
Incorrect buffer size calculation in ImageMagick
- ImageMagick
- Memory corruption
- CVSS 2.9 Low
Incorrect buffer size calculation in ImageMagick
- ImageMagick
- Memory corruption
- CVSS 7.0 High
Arbitrary Code Execution in `AppImage` version `ImageMagick`
- ImageMagick
- CWE-427
-
Use after free in ImageMagick
- ImageMagick
- Memory corruption
-
Heap-based buffer overflow in ImageMagick
- ImageMagick
- Memory corruption
-
Stack-based buffer overflow in ImageMagick
- ImageMagick
- Memory corruption
- CVSS 5.5 Medium
Heap-based buffer overflow in ImageMagick
- ImageMagick
- Memory corruption
- CVSS 7.8 High
Command injection in ImageMagick
- ImageMagick
- Command injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Improper input validation in ImageMagick
- ImageMagick
- CWE-20
-
Integer overflow in ImageMagick
- ImageMagick
- Memory corruption
- CVSS 5.5 Medium
Heap-based buffer overflow in ImageMagick
- ImageMagick
- Memory corruption
-
Buffer overflow in ImageMagick
- ImageMagick
- Memory corruption
-
Buffer overflow in ImageMagick
- ImageMagick
- Memory corruption
-
Out-of-bounds read in ImageMagick
- ImageMagick
- Memory corruption
-
Memory leak in ImageMagick
- ImageMagick
- Denial of service
-
Integer overflow in ImageMagick
- ImageMagick
- Memory corruption
- CVSS 5.5 Medium
Reachable assertion in ImageMagick
- ImageMagick
- Denial of service
-
ImageMagick: In ImageMagick, there is load of misaligned address for type 'double'…
- ImageMagick
-
Integer overflow in ImageMagick
- ImageMagick
- Memory corruption
-
Integer overflow in ImageMagick
- ImageMagick
- Memory corruption
-
Use after free in ImageMagick
- ImageMagick
- Memory corruption
-
Improper input validation in imagemagick
- imagemagick
- CWE-20
-
Out-of-bounds read in ImageMagick
- ImageMagick
- Memory corruption
-
NULL pointer dereference in ImageMagick
- ImageMagick
- Memory corruption
-
Use after free in ImageMagick
- ImageMagick
- Memory corruption
- CVSS 4.4 Medium
Issue when Configuring the ImageMagick Security Policy
- ImageMagick
- Information disclosure
-
Integer overflow in ImageMagick
- ImageMagick
- Memory corruption