ImageMagick Input Validation Error Vulnerability (CNVD-2021-10259)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. ImageMagick Input Validation Error Vulnerability, coders/bmp.c in versions of ImageMagick prior to 7.0.9-0, exists outside the range of representable values of type...

ImageMagick Input Validation Error Vulnerability (CNVD-2021-10262)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An input validation error vulnerability exists in ImageMagick, where MagickCore/quantum.h in versions prior to ImageMagick 7.0.9-0 has a range of representable values...

ImageMagick Digital Error Vulnerability (CNVD-2021-10255)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A numeric error vulnerability exists in MagickCore/segment.c in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting a...

ImageMagick Digital Error Vulnerability (CNVD-2021-10265)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A numeric error vulnerability exists in MagickCore/resize.c in versions of ImageMagick prior to 7.0.8-68. An attacker could exploit this vulnerability via a specially...

ImageMagick Studio ImageMagick 数字错误漏洞

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A numeric error vulnerability exists in MagickCore/gem-private.h in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting a...

ImageMagick Input Validation Error Vulnerability

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 6.9.10-69, which ste...

CVE-2020-27764

In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator where a sizet cast should have been a ssizet cast, which causes out-of-range values under some circumstances when a crafted input file is processed by ImageMagick. Red Hat Product Security marked this as Low severity...

ImageMagick Studio ImageMagick 缓冲区错误漏洞

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A stack buffer overflow and unconditional jump vulnerability exists in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7. No detailed vulnerability details are provid...

USN-4549-1 imagemagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain specially crafted image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or other unspecified impact. CVE-2019-1994...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. A heap-based buffer over-read in MagickCore/fourier.c allows an attacker to execute code on the system due to incorrect calls to GetCacheViewVirtualPixels...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. The vulnerability exists if a victim opened a specially crafted DCM or XWD file, an attacker could potentially execute arbitrary code on the victim's machine...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists through a divide-by-zero vulnerability in the MeanShiftImage function...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists through memory leak issues at AcquireMagickMemory in wand/mogrify.c...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A memory leak in AcquireMagickMemory due to improper handling of the NoSuchImage error allows an attacker to crash the application...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages...

ImageMagick: division by zero in MeanShiftImage in MagickCore/feature.c

In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file...

ImageMagick: CPU Exhaustion via crafted input file

In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote...

F5 Networks BIG-IP : ImageMagick vulnerability (K20336394)

ImageMagick before 7.0.8-50 has a 'use of uninitialized value' vulnerability in the function ReadCUTImage in coders/cut.c. CVE-2019-13135 Impact BIG-IP AAM,Edge Gateway, and WebAccelerator This issue affects BIG-IP systems only when WAM or AAM is provisioned. If exploited, this vulnerabilitymay...

CVE-2014-1947

Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different...

CVE-2014-1958

Buffer overflow in the DecodePSDPixels function in coders/psd.c in ImageMagick before 6.8.8-5 might allow remote attackers to execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than CVE-2014-2030...