16 matches found
JLSEC-2026-910
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...
PT-2026-76302
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...
EUVD-2023-38533
Malicious code in bioql PyPI...
ImageMagick ReplaceXmpValue Heap Buffer Overflow DoS
The vulnerability of the ReplaceXmpValue function MagickCore/profile.c in the console-based image editing tool ImageMagick is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2023-34475
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...
CVE-2023-34475
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...
Heap overflow
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...
ImageMagick resource management error vulnerability
ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert or write images in a variety of formats. A security vulnerability exists in ImageMagick, which stems from a memory reuse after release issue found in the...
CVE-2023-34475
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...
CVE-2023-34475
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...
CVE-2023-34475
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...
CVE-2023-34475
ImageMagick vulnerability CVE-2023-34475 is a heap use-after-free in ReplaceXmpValue() (MagickCore/profile.c). It can be triggered when a user opens a crafted file, causing a crash and denial of service. Fedora advisories associate this CVE with updates: Fedora 37 to ImageMagick 6.9.12.93 and Fed...
CVE-2023-34475: Use After Free
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...
PT-2023-8783
Name of the Vulnerable Software and Affected Versions ImageMagick affected versions not specified Description A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. This issue can be exploited by an attacker who tricks a user into opening a...
CVE-2023-34475
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...
CVE-2023-34475
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an application to crash, resulting in a denial of service...