2506 matches found
ImageMagick: memory leak in coders/dot.c
A memory leak was discovered in ImageMagick in function ReadDOTImage. An application that uses ImageMagick to parse DOT images may be vulnerable to this flaw and crash due to some memory that is never freed...
ImageMagick: off-by-one read in formatIPTCfromBuffer function in coders/meta.c
An off-by-one read vulnerability was discovered in ImageMagick in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program...
F5 Networks BIG-IP : ImageMagick vulnerability (K03512441)
ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c. CVE-2019-13136 Impact BIG-IP AAM,Edge Gateway, WebAccelerator This issue affects BIG-IP systems only when WAM or AAM is provisioned.If exploited, this vulnerability may result ...
CVE-2020-10251
In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c. It can be triggered via an image with a width or height value that exceeds the actual size of the image...
CVE-2020-10251
In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c. It can be triggered via an image with a width or height value that exceeds the actual size of the image...
CVE-2020-10251
In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c. It can be triggered via an image with a width or height value that exceeds the actual size of the image...
CVE-2020-10251
CVE-2020-10251 affects ImageMagick 7.0.9. The vulnerability is an out-of-bounds read in ReadHEICImageByID (coders\heic.c) triggered when a width or height exceeds the actual image size. The documented impact is an out-of-bounds read; no exploitation details or fixes are provided in the connected ...
CVE-2020-10251
In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c. It can be triggered via an image with a width or height value that exceeds the actual size of the image...
CVE-2020-10251: Out-of-bounds Read
In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c. It can be triggered via an image with a width or height value that exceeds the actual size of the image...
CVE-2014-1947
CVE-2014-1947, 2014-1958, and 2014-2030 describe stack-based buffer overflows in ImageMagick’s PSD handling (psd.c): WritePSDImage and DecodePSDPixels functions are implicated. 1947 targets WritePSDImage in ImageMagick 6.5.4 and earlier, enabling potential denial of service or remote code executi...
CVE-2014-1947: Out-of-bounds Write
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick 6.5.4 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of layers in a PSD image, involving the L%02ld string, a different...
CVE-2019-16711
ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c...
CVE-2019-16709
ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage...
CVE-2019-16710
ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS. The attack is possible because of a flawed checking of len parameter in coders/meta.c, causing out-of-bounds memory read when an attacker inputs a malicious file...
CVE-2016-7524
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
Out-of-bounds
coders/meta.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
CVE-2014-2030: Out-of-bounds Write
Stack-based buffer overflow in the WritePSDImage function in coders/psd.c in ImageMagick, possibly 6.8.8-5, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted PSD image, involving the L%06ld string, a different vulnerability than...