4090 matches found
CVE-2023-34474
A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of service...
SUSE CVE-2023-34475
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...
CVE-2023-34152
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured...
CVE-2023-34151
A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to sizet in svg, mvg and other coders recurring bugs of CVE-2022-32546...
PT-2023-3419 · Unknown +2 · Imagemagick +2
Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue is related to a heap-based buffer overflow in the ImageMagick package, which can cause the application to crash. This can be exploited by an attacker to disrupt service...
PT-2023-3431
Name of the Vulnerable Software and Affected Versions ImageMagick affected versions not specified Description The issue is related to an undefined behavior caused by casting double to size t in certain coders, such as svg and mvg, which can lead to integer overflow. This can potentially allow an...
The vulnerability of the importmultispectralquantum() function in the ImageMagick console-based graphics editor allows a hacker to trigger a service failure.
The vulnerability of the importmultispectralquantum function in the ImageMagick console-based graphics editor is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
DEBIAN-CVE-2023-1906
A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of servi...
UBUNTU-CVE-2023-1906
A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of servi...
SUSE CVE-2023-1906
A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an application to crash, resulting in a denial of servi...
The vulnerability of the RelinquishDCMInfo() function in the dcm.c component of the ImageMagick console graphics editor allows a hacker to access confidential data and also trigger a service denial.
The vulnerability of the RelinquishDCMInfo function in the dcm.c component of the ImageMagick console-based graphics editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, as well as cause a service...
The vulnerability of the coders/pcl.c component in the console-based graphic editor ImageMagick allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the coders/pcl.c component of the console-based image editing tool ImageMagick is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
DEBIAN-CVE-2023-1289
A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulting in a denial o...
UBUNTU-CVE-2023-1289
A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulting in a denial o...
Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2023-121)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-121 advisory. ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image e.g., for resize, the convert process could be left waiting for stdin input. CVE-2022-44267 ImageMagick...
USN-5855-2 imagemagick vulnerabilities
USN-5855-1 fixed a vulnerability in ImageMagick. This update provides the corresponding update for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 22.10. Original advisory details: It was discovered that ImageMagick incorrectly handled certain PNG images. If a user or automated system were tricked...
SUSE CVE-2004-0827
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service application crash and possibly execute arbitrary code via malformed 1 AVI, 2 BMP, or 3 DIB files...
SUSE CVE-2005-0005
Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers...