15710 matches found
ImageMagick memory misreference vulnerability (CNVD-2018-12311)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory misreference vulnerability exists in the ReadMATImage function in coders/mat.c in ImageMagick 7.0.7-36 Q16. An attacker can exploit this vulnerability with th...
ImageMagick heap buffer overread vulnerability (CNVD-2018-12312)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A heap buffer over-read vulnerability exists in SetGrayscaleImage in quantize.c in ImageMagick 7.0.7-37 Q16. Allows an attacker to cause the heap buffer to be overread...
CVE-2018-11655
In ImageMagick 7.0.7-20 Q16 x8664, a memory leak vulnerability was found in the function GetImagePixelCache in MagickCore/cache.c, which allows attackers to cause a denial of service via a crafted CALS image file...
CVE-2018-11624
In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file...
CVE-2018-11625
In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...
CVE-2016-10571
bkjs-wand is imagemagick wand support for node.js and backendjs bkjs-wand versions lower than 0.3.2 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controll...
CVE-2016-10571
bkjs-wand is imagemagick wand support for node.js and backendjs bkjs-wand versions lower than 0.3.2 download binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controll...
CVE-2016-10571
CVE-2016-10571 affects bkjs-wand (ImageMagick wand support for Node.js/backendjs). Versions
Design/Logic Flaw
In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file...
CVE-2018-11624
In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file...
CVE-2018-11625
In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...
DEBIAN-CVE-2018-11625
In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...
UBUNTU-CVE-2018-11624
In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file...
CVE-2018-11624
In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file...
CVE-2018-11625
In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...
Heap overflow
In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...
CVE-2018-11624
In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file...
CVE-2018-11625
ImageMagick vulnerable to a heap-based buffer over-read in SetGrayscaleImage (quantize.c) on 7.0.7-37 Q16 when processing a crafted image file. This remote-triggered issue (CVE-2018-11625) is confirmed by SUSE/openSUSE advisories and related OpenVAS/NASL entries, which describe the fix as part of...
