CVE-2020-29599

ImageMagick-identified CVE-2020-29599 is a command-injection flaw in the -authenticate handling for password-protected PDFs, exploitable via coders/pdf.c. Affected releases include ImageMagick 6.9.11-40 and 7.x prior to 7.0.10-40; user-supplied passwords could inject shell commands. Public adviso...

ImageMagick Input Validation Error Vulnerability (CNVD-2021-10258)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An input validation error vulnerability exists in ImageMagick, where RestoreMSCWarning in /coders/pdf.c in versions prior to ImageMagick 7.0.9-0 exists outside the range...

ImageMagick Digital Error Vulnerability (CNVD-2021-10260)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A numeric error vulnerability exists in MagickCore/gem-private.h in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting a...

CVE-2020-29599

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

ImageMagick integer overflow vulnerability (CNVD-2021-10261)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An integer overflow vulnerability exists in MagickCore/statistic.c in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting ...

ImageMagick Input Validation Error Vulnerability (CNVD-2021-10263)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An input validation error vulnerability exists in ImageMagick, where MagickCore/statistic.c in versions prior to ImageMagick 7.0.9-0 has a range of representable values...

ImageMagick integer overflow vulnerability (CNVD-2021-10257)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An integer overflow vulnerability exists in MagickCore/string.c in versions of ImageMagick prior to 7.0.8-68. An attacker could exploit this vulnerability to cause an...

Imagemagick Studio ImageMagick Input Validation Error Vulnerability (CNVD-2020-70258)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems...

ImageMagick Input Validation Error Vulnerability (CNVD-2021-10259)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. ImageMagick Input Validation Error Vulnerability, coders/bmp.c in versions of ImageMagick prior to 7.0.9-0, exists outside the range of representable values of type...

ImageMagick Input Validation Error Vulnerability (CNVD-2021-10262)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An input validation error vulnerability exists in ImageMagick, where MagickCore/quantum.h in versions prior to ImageMagick 7.0.9-0 has a range of representable values...

Imagemagick Studio ImageMagick Input Validation Error Vulnerability (CNVD-2020-70259)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. An input validation error vulnerability exists in versions prior to ImageMagick...

ImageMagick Digital Error Vulnerability (CNVD-2021-10255)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A numeric error vulnerability exists in MagickCore/segment.c in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting a...

ImageMagick exceeds the range of representable values of type 'unsigned long' Vulnerability

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A vulnerability exists in MagickCore/statistic.c in versions of ImageMagick prior to 7.0.8-69 that exceeds the range of representable values of type 'unsigned long'. An...

CVE-2020-29599

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. A NULL pointer dereference vulnerability in the function saveBinaryCLProgram in magick/opencl.c allows an attacker to execute arbitrary code on the host OS...

Memory Leak

In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A memory leak in WritePSDChannel in coders/psd.c allows an attacker to crash the application...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists in the ReadBMPImage function of the coders/bmp.c due to the infinite loop, allowing a malicious user to crash the application via a crafted bmp file...

Buffer Overflow

ImageMagick is vulnerable to buffer overflow. This vulnerability allows attackers to cause a denial of service via a crafted SVG image file...

Out-of-Bounds Read

ImageMagick is vulnerable to out-of-bounds read. The vulnerability can be triggered via an image with a width or height value that exceeds the actual size of the image...