37 matches found
Denial Of Service (DoS)
imagemagick is vulnerable to Denial of Service DoS. A heap-based buffer overflow vulnerability allows an attacker to cause denial of service conditions via ReadTIFFImage in coders/tiff.c, by exploiting a flaw in the way that ImageMagick handles TIFF images...
CVE-2023-3428
A heap-based buffer overflow vulnerability was found in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service...
CVE-2023-3428
CVE-2023-3428 is a heap-based buffer overflow vulnerability in ImageMagick's coders/tiff.c. A local attacker could trick a user into opening a crafted TIFF file, resulting in an application crash and denial of service. Public advisories (e.g., Debian DSA-5628-1 and ALAS/Cloud Foundry notices) ind...
Amazon Linux 2 : ImageMagick (ALAS-2023-2123)
The version of ImageMagick installed on the remote host is prior to 6.9.10.97-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2123 advisory. The upstream bug report describes this issue as follows:A vulnerability was found in ImageMagick =7.1.1, where heap-based...
CVE-2023-3195
CVE-2023-3195 is an ImageMagick vulnerability affecting the coder for TIFF files (coders/tiff.c). The issue is a stack-based buffer overflow that can be triggered by opening a specially crafted TIFF image, causing an application crash and a denial of service. The vulnerability is concrete in Imag...
K03512441: ImageMagick vulnerability CVE-2019-13136
Security Advisory Description ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c. CVE-2019-13136 Impact BIG-IP AAM, Edge Gateway, WebAccelerator This issue affects BIG-IP systems only when WAM or AAM is provisioned. If exploited...
Heap overflow
A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation fault...
CVE-2020-27829
A heap based buffer overflow in coders/tiff.c may result in program crash and denial of service in ImageMagick before 7.0.10-45...
CVE-2020-27829
A heap based buffer overflow in coders/tiff.c may result in program crash and denial of service in ImageMagick before 7.0.10-45...
CVE-2020-27829
A heap based buffer overflow in coders/tiff.c may result in program crash and denial of service...
Denial Of Service (DoS)
imagemagick is vulnerable to denial of service. A heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c allows an attacker to crash the application via a malicious image file and potentially access confidential information in memory...
F5 Networks BIG-IP : ImageMagick vulnerability (K03512441)
ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c. CVE-2019-13136 Impact BIG-IP AAM,Edge Gateway, WebAccelerator This issue affects BIG-IP systems only when WAM or AAM is provisioned.If exploited, this vulnerability may result ...
CVE-2019-13136
ImageMagick, prior to version 7.0.8-50, has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c...
CVE-2019-10650
CVE-2019-10650: ImageMagick 7.0.8-36 Q16 has a heap-based buffer over-read in WriteTIFFImage (coders/tiff.c) that can cause denial of service or information disclosure via crafted TIFF images. Likely linked to LibTIFF write paths (TIFFRewriteDirectory/TIFFWriteDirectory) and incomplete prior fix....
CVE-2018-10804
ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c...
ImageMagick Memory Leak Vulnerability Vulnerability
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory disclosure vulnerability exists in WriteTIFFImage in the coders/tiff.c file in ImageMagick version 7.0.7-28. ...
Memory Leaks
ImageMagick is vulnerable to memory leaks. The memory allocation in the WriteTIFFImage function of coders/tiff.c is not properly handled, leading to memory leaks...
Memory corruption
ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c...
CVE-2018-9133
ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...
CVE-2018-8960
CVE-2018-8960 affects ImageMagick 7.0.7-26 Q16 ReadTIFFImage (coders/tiff.c): memory is not properly restricted during allocation, causing a heap-based buffer over-read. NVD CVSSv3 base score 8.8 (HIGH) with network attack, no user interaction, and impacts to confidentiality/integrity/availabilit...