CVE-2022-32545

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior...

CVE-2022-32546

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior...

CVE-2022-32545

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior...

HighCMS/HighPortal 12.x SQL Injection

Exploit Title: HighCMS/HighPortal v12.x SQL Inj Type : WEBAPPS "HighCMS/HighPortal" Platform : ASP.NET Date : 4/23/2022 Exploit Author : E1.Coders Software Link : https://aryanic.com/page/portal Version : v12.x Category : Webapps Tested on: Linux/Windows Google Dork:...

Ubuntu 16.04 ESM : ImageMagick vulnerabilities (USN-5335-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5335-1 advisory. It was discovered that ImageMagick incorrectly handled certain values when processing XPM image data or large images. If a user or automated system using...

CVE-2021-3596

A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage in coders/svg.c. This issue is due to not checking the return value from libxml2's xmlCreatePushParserCtxt and uses the value directly, which leads to a crash and segmentation fault...

CVE-2021-3596

A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage in coders/svg.c. This issue is due to not checking the return value from libxml2's xmlCreatePushParserCtxt and uses the value directly, which leads to a crash and segmentation fault...

Null pointer dereference

A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage in coders/svg.c. This issue is due to not checking the return value from libxml2's xmlCreatePushParserCtxt and uses the value directly, which leads to a crash and segmentation fault...

Heap overflow

A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation fault...

CVE-2021-3596

A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage in coders/svg.c. This issue is due to not checking the return value from libxml2's xmlCreatePushParserCtxt and uses the value directly, which leads to a crash and segmentation fault...

CVE-2021-3596

CVE-2021-3596 affects ImageMagick prior to 7.0.10-31, where a NULL pointer dereference in ReadSVGImage() (coders/svg.c) occurs due to not validating the return value from libxml2’s xmlCreatePushParserCtxt() and using it directly. This leads to a crash/segmentation fault. The issue is documented a...

CVE-2021-3610

A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage in coders/tiff.c. This issue is due to an incorrect setting of the pixel array size, which can lead to a crash and segmentation fault...

Denial Of Service (DoS)

imagemagick:bullseye is vulnerable to denial of service. The vulnerability exists in 1xmlCreatePushParserCtxt function of coders/svg.c due to a null pointer dereferences flaw which allows an attacker to crash the application via malicious input...

Debian DLA-2902-1 : graphicsmagick - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2902 advisory. - GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c. CVE-2020-12672 Note that Nessus has not tested for this issue but has...

The vulnerability of the ReadXPMImage function in the coders/xpm.c component of the console-based image editing tool ImageMagick allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadXPMImage function in the coders/xpm.c component of the console-based image editing tool ImageMagick involves allowing the operation to be within acceptable buffer data limits. Exploiting this vulnerability allows a remote attacker to gain access to confidential data,...

The vulnerability of the coders/bmp.c component in the console-based graphic editor ImageMagick, related to the infinite execution of a loop, allows an attacker to cause a service failure.

The vulnerability of the coders/bmp.c component in the console-based graphic editor ImageMagick is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker who operates remotely to cause a service failure using a specially created file...

The vulnerability of the ReadCUTImage function in the coders/cut.c component of the console image editing tool ImageMagick, related to the assignment of a null pointer, allows a malicious actor to cause a service failure.

The vulnerability of the ReadCUTImage function in the coders/cut.c component of the console-based image editing tool ImageMagick involves the use of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure by using a corrupted image file...

The vulnerability of the ReadOneMNGImage function in the coders/png.c component of the console image editing tool ImageMagick, related to infinite loop execution, allows a hacker to cause a service failure.

The vulnerability of the ReadOneMNGImage function in the coders/png.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created mng file...

The vulnerability of the ReadTXTImage function in the coders/txt.c component of the console image editing tool ImageMagick, related to infinite loop execution, allows attackers to cause a service failure.

The vulnerability of the ReadTXTImage function in the coders/txt.c component of the console image editing tool ImageMagick is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created image file...

CVE-2021-3596

A NULL pointer dereference flaw was found in ImageMagick in ReadSVGImage in coders/svg.c . This issue is due to not checking the return value from libxml2's xmlCreatePushParserCtxt and uses the value directly, which leads to a crash and segmentation fault...