Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. The vulnerability exists as an integer overflow flaw was found in ImageMagick's DIB parsing code. If a victim opened a specially-crafted DIB file, an attacker could potentially execute arbitrary code with the privileges of the user running...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. The vulnerability exists if a victim opened a specially crafted DCM or XWD file, an attacker could potentially execute arbitrary code on the victim's machine...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists as attempting to process a specially-crafted input file in these formats could cause ImageMagick to enter an infinite loop...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. The vulnerability exists if a victim opened a specially-crafted DCM, DIB, XBM, XCF or XWD file, an attacker could potentially execute arbitrary code with the privileges of the user running ImageMagick...

CentOS 7 : ImageMagick (RHSA-2020:1180)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1180 advisory. - ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a...

ImageMagick, autotrace, emacs, inkscape security update

CentOS Errata and Security Advisory CESA-2020:1180 An update for ImageMagick, autotrace, emacs, and inkscape is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base...

ImageMagick security, bug fix, and enhancement update

autotrace 0.31.1-38 - Resolves: 1765205 rebuild against new IM emacs 1:24.3-23 - Resolves: 1765208 rebuild against new IM ImageMagick 6.9.10.68-3 - Fixing freeze when svg file contains class='' 6.9.10.68-2 - Fixed ghostscript fonts, fixed multilib conflicts 6.9.10.68-1 - Rebase to 6.9.10.68...

CVE-2019-18853

ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XMLPARSEHUGE is not properly restricted in coders/svg.c, related to SVG and libxml2...

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in void mc_chroma<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5646992350117888 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x619000001db6 Crash State: void mcchroma...

CVE-2019-13307

A heap-based buffer overflow was discovered in ImageMagick in the way it parses images when using the evaluate-sequence option. Applications compiled against ImageMagick libraries that accept untrustworthy images and use the evaluate-sequence option or function EvaluateImages may be vulnerable to...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The attack exists because the function in ReadImage in MagickCore/constitute.c does not properly handle the input matlab image file...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer over-read in WriteTIFFImage in coders/tiff.c...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists through a divide-by-zero vulnerability in the MeanShiftImage function...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists through memory leak issues at AcquireMagickMemory in wand/mogrify.c...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A memory leak in AcquireMagickMemory due to improper handling of the NoSuchImage error allows an attacker to crash the application...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. A stack-based buffer overflow in coders/pnm.c in WritePNMImage due to an off-by-one error in strncpy allows an attacker to execute arbitrary code on the system...

Memory Leaks

ImageMagick is vulnerable to memory leaks in the function AcquireMagickMemory because of an AnnotateImage error...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists through a heap-based buffer over-read in AdaptiveThresholdImage in MagickCore/threshold.c...

Memory Leaks

ImageMagick is vulnerable to memory leaks. It is possible because an image display and manipulation tool for the X Window System can read and write multiple image formats...