CVE-2023-34475: Use After Free

A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...

Denial Of Service (DoS) Through Assertion Failure

ImageMagick is vulnerable to denial of service DoS attacks. These attacks are possible through missing checks in the ReadDDSImage function in coders/dds.c. The missing checks cause an assertion failure to occur in the ResetImageProfileIterator function of MagickCore/profile.c...

CVE-2016-7799

MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

CVE-2016-7799: Out-of-bounds Read

MagickCore/profile.c in ImageMagick before 7.0.3-2 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...

CVE-2016-5841: Integer Overflow or Wraparound

Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service segmentation fault or possibly execute arbitrary code via vectors involving the offset variable...