923 matches found
CVE-2016-7524
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
CVE-2016-7523
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
CVE-2014-8561
imagemagick 6.8.9.6 has remote DOS via infinite loop...
The vulnerability of the ReadBMPImage and WriteBMPImage functions in the console-based image editing tool ImageMagick allows a hacker to execute arbitrary code.
The vulnerability of the ReadBMPImage and WriteBMPImage functions in the coder’s source code at bmp.c in the console-based image editing tool ImageMagick is related to writing data beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a remote attacker to execute...
ImageMagick memory misreference vulnerability (CNVD-2019-41003)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory misreference vulnerability exists in DestroyStringInfo in MagickCore/string.c in versions of ImageMagick prior to 7.0.8-55. The vulnerability stems from the...
PT-2019-5863 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.10-69 Description: The issue is related to the ApplyEvaluateOperator function in the /MagickCore/statistic.c component of ImageMagick, where a size t cast should have been a ssize t cast. This causes...
CVE-2019-14981
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file...
Debian: Security Advisory (DLA-1888-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the WritePNMImage function in the console-based image editing tool ImageMagick allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the WritePNMImage function in the console-based image editing tool ImageMagick is related to the execution of operations beyond the buffer’s boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or execute arbitrary code using ...
ImageMagick Resource Management Error Vulnerability (CNVD-2019-29434)
ImageMagick is a set of open source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. A security vulnerability exists in ImageMagick Studio ImageMagick version 7.0.8-50 Q16. An attacker could exploit thi...
ImageMagick Resource Management Error Vulnerability (CNVD-2019-29435)
ImageMagick is the United States ImageMagick Studio, Inc. of a set of open source image processing software. A security vulnerability exists in ImageMagick Studio ImageMagick version 7.0.8-50 Q16. An attacker can exploit this vulnerability to cause a denial of service memory leak...
ImageMagick heap buffer overflow vulnerability (CNVD-2019-21667)
ImageMagick Studio ImageMagick is a suite of open-source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. ImageMagick Studio A buffer overflow vulnerability exists in the 'EvaluateImages' function of th...
CVE-2019-12979
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c...
CVE-2019-12979
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c...
CVE-2017-15652
Artifex Ghostscript 9.22 is affected by: Obtain Information. The impact is: obtain sensitive information. The component is: affected source code file, affected function, affected executable, affected libga imagemagick used that. The attack vector is: Someone must open a postscript file though...
PT-2019-4619 · Imagemagick +4 · Imagemagick +4
Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-36 Q16 Description: The issue is related to a heap-based buffer over-read in the WriteTIFFImage function of coders/tiff.c. This allows an attacker to cause a denial of service or information disclosure via a crafted...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS. The CPU and memory exhaustion can be caused when a malicious BMP file is input to the coders/bmp.c...
ImageMagick Denial of Service Vulnerability (CNVD-2018-26702)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'ReadBGRImage' function in the coders/bgr.c file in ImageMagick version...
GLSA-201810-04 : ImageMagick: Security hardening
The remote host is affected by the vulnerability described in GLSA-201810-04 ImageMagick: Security hardening If you process an image with ImageMagick and dont validate the file before e.g. check magic byte, ImageMagick will call any coders found in the given file. So if ImageMagick will find...