ImageMagick: heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows

A heap-based buffer overflow was discovered in ImageMagick in the way it parses images when using the evaluate-sequence option. Applications compiled against ImageMagick libraries that accept untrustworthy images and use the evaluate-sequence option or function EvaluateImages may be vulnerable to...

imagemagick: use of uninitialized value in function ReadPANGOImage in coders/pango.c

ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c...

ImageMagick: Use after free in ReadMATImage in coders/mat.c

coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...

ImageMagick: out-of-bounds read in ReadXWDImage in coders/xwd.c

The XWD image X Window System window dumping file parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service application crash resulting from an out-of-bounds Read in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability th...

ImageMagick: infinite loop ReadTXTImage in function in coders/txt.c

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted image file that is mishandled in a GetImageIndexInList call...

ImageMagick: assertion failure in MogrifyImageList function in MagickWand/mogrify.c

An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service assertion failure and application exit in ReplaceImageInList via a crafted file...

ImageMagick: memory leak in ReadMIFFImage in coders/miff.c

ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c...

ImageMagick: CPU Exhaustion via crafted input file

In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang of several minutes during which CPU and memory resources are consumed until ultimately an attempted large memory allocation fails. Remote...

ImageMagick: memory leak in WritePCXImage in coders/pcx.c

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c...

ImageMagick: missing check for fputc function in multiple files

The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check the return value of the fputc function, which allows remote attackers to cause a denial of service via a crafted image...

imagemagick: stack-based buffer overflow in function PopHexPixel in coders/ps.c

In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which allows an attacker to cause a denial of service or code execution via a crafted image file...

Moderate: Red Hat Security Advisory: ImageMagick security, bug fix, and enhancement update

An update for ImageMagick, autotrace, emacs, and inkscape is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

ImageMagick: heap-based buffer overflow in WriteTIFFImage in coders/tiff.c

WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service application crash resulting from a heap-based buffer over-read via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and...

imagemagick:crop_fuzzer: Use-of-uninitialized-value in LibRaw::open_datastream

Detailed Report: https://oss-fuzz.com/testcase?key=5724383278792704 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::opendatastream LibRaw::openfi...

PT-2023-3403

Name of the Vulnerable Software and Affected Versions ImageMagick affected versions not specified Description A security flaw in ImageMagick causes a remote code execution vulnerability in OpenBlob when --enable-pipes is configured. This vulnerability exists due to the lack of measures to...

RHEL 7 : ImageMagick (RHSA-2020:1180)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1180 advisory. ImageMagick is an image display and manipulation tool for the X Window System that can read and write multiple image formats. The following...

F5 Networks BIG-IP : ImageMagick vulnerability (K03512441)

ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c. CVE-2019-13136 Impact BIG-IP AAM,Edge Gateway, WebAccelerator This issue affects BIG-IP systems only when WAM or AAM is provisioned.If exploited, this vulnerability may result ...

F5 Networks BIG-IP : ImageMagick vulnerability (K20336394)

ImageMagick before 7.0.8-50 has a 'use of uninitialized value' vulnerability in the function ReadCUTImage in coders/cut.c. CVE-2019-13135 Impact BIG-IP AAM,Edge Gateway, and WebAccelerator This issue affects BIG-IP systems only when WAM or AAM is provisioned. If exploited, this vulnerabilitymay...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. A flaw in MagickWand/mogrify.c causes memory leaks, allowing an attacker to input a malicious image file to trigger an application crash...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The attack exists because the function WriteTIFFImage of coders/tiff.c causes memory leaks in AcquireMagickMemory , allowing an attacker to input a malicious image file to trigger a heap-based buffer over-read...