Lucene search
K

26 matches found

Github Security Blog
Github Security Blog
added 2026/05/18 8:33 p.m.16 views

ImageMagick: Policy Bypass in MNG coder could

Because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...

5.3CVSS5.8AI score0.00041EPSS
Exploits0References3Affected Software18
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-18327

Malware in sbrugna...

5.5CVSS6.9AI score0.00973EPSS
Exploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:40 a.m.3 views

SUSE CVE-2017-13145

In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash...

6.5CVSS9AI score0.01329EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:39 a.m.2 views

SUSE CVE-2017-14060

In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denial of Service in the QueueAuthenticPixelCacheNexus function within the MagickCore/cache.c file by submitting a malformed image file...

5.3CVSS8.9AI score0.00252EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:39 a.m.1 views

SUSE CVE-2017-14533

ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c...

5.3CVSS9.2AI score0.00467EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:11 a.m.2 views

SUSE CVE-2019-12975

ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c...

3.3CVSS6.8AI score0.00125EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 3:53 a.m.2 views

SUSE CVE-2020-25665

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

5.5CVSS6.6AI score0.00973EPSS
Exploits1References8
OSV
OSV
added 2021/04/07 11:2 a.m.2 views

OESA-2021-1110 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.1CVSS6.4AI score0.00973EPSS
Exploits4References12
CNVD
CNVD
added 2020/12/15 12:0 a.m.6 views

ImageMagick Code Issue Vulnerability

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.8-68, which stem...

5.5CVSS5.9AI score0.00973EPSS
Exploits1References1
OSV
OSV
added 2020/12/08 9:15 p.m.1 views

DEBIAN-CVE-2020-25665

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

5.5CVSS6.7AI score0.00973EPSS
Exploits1References1
NVD
NVD
added 2020/12/08 9:15 p.m.11 views

CVE-2020-25665

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

5.5CVSS5.7AI score0.00973EPSS
Exploits1References3
OSV
OSV
added 2020/12/08 9:15 p.m.2 views

UBUNTU-CVE-2020-25665

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

5.5CVSS6.8AI score0.00973EPSS
Exploits1References5
Prion
Prion
added 2020/12/08 9:15 p.m.24 views

Out-of-bounds

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

4.3CVSS5.4AI score0.00973EPSS
Exploits1References3Affected Software2
UbuntuCve
UbuntuCve
added 2020/12/08 9:15 p.m.25 views

CVE-2020-25665

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

5.5CVSS6.8AI score0.00973EPSS
Exploits1References4
Cvelist
Cvelist
added 2020/12/08 12:0 a.m.14 views

CVE-2020-25665

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

5.9AI score0.00973EPSS
Exploits1References3
Veracode
Veracode
added 2020/12/06 4:14 a.m.22 views

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. An out-of-bounds read in the PALM image coder at coders/palm.c due to an improper call to AcquireQuantumMemory in routine WritePALMImage allows an attacker to crash the application...

5.5CVSS4.2AI score0.00973EPSS
Exploits1References4Affected Software4
RedhatCVE
RedhatCVE
added 2020/11/24 7:24 p.m.33 views

CVE-2020-25665

A flaw was found in the PALM image coder at coders/palm.c where it makes an improper call to AcquireQuantumMemory in the WritePALMImage routine because it needs to be offset by 256. This issue causes an out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to...

5.5CVSS2.2AI score0.00973EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:0 a.m.2 views

The vulnerability of the `ReadJNGImage` and `ReadOneJNGImage` functions (coders/png.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to execute arbitrary code.

The vulnerability of the ReadJNGImage and ReadOneJNGImage functions coders/png.c in the cross-platform graphics library GraphicsMagick is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created...

10CVSS7.3AI score0.01136EPSS
Exploits0References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2019/07/01 8:15 p.m.1 views

CVE-2019-13135

ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c...

8.8CVSS5.5AI score0.02588EPSS
Exploits0References13
OSV
OSV
added 2018/09/09 3:29 p.m.2 views

DEBIAN-CVE-2018-16749

In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service WriteBlob assertion failure and application exit via a crafted file...

6.5CVSS6.6AI score0.00241EPSS
Exploits1References1
Rows per page
Query Builder