7 matches found
ImageMagick Memory Leak DoS
The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow an attacker to cause a service failure...
Advisory ROSA-SA-2026-3297
CVE-ID: CVE-2024-41817 BDU-ID: None CVE-Crit: HIGH CVE-DESC.: The vulnerability in the AppImage version of ImageMagick relates to the use of an empty path during the installation of environment variables MAGICKCONFIGUREPATH and LDLIBRARYPATH. This allows attackers to execute arbitrary code by...
ImageMagick tiff.c DoS
The vulnerability of the tiff.c file in the console-based graphic editor ImageMagick is related to buffer overflow in the heap. Exploiting this vulnerability can allow an attacker to cause a system failure...
PT-2019-4436
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.9-0 Description The issue is related to the implementation of XML PARSE HUGE in the ImageMagick console graphic editor, specifically in the coders/svg.c file, and is connected to insufficient input validation...
PT-2017-2811
Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.7-0 Q16 Description The issue is related to errors in resource management in the ReadPSDLayersInternal function of the ImageMagick console graphic editor. Exploitation of this issue may allow a remote attacker to cause...
PT-2017-2610
Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.6-1 Description The issue is related to a memory exhaustion vulnerability in the ReadOneJNGImage function, located in coders/png.c, of the ImageMagick console graphic editor. This vulnerability can be exploited by a...
PT-2015-3278
Name of the Vulnerable Software and Affected Versions ImageMagick versions 6.9.1-3 and later Description The issue is caused by an integer overflow in the ImageMagick console graphic editor. This can be exploited by a remote attacker to cause a denial of service application crash by providing lar...