15479 matches found
ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution
Summary A format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from heap overflow to remote code...
ROOT-OS-DEBIAN-13-CVE-2025-53014 CVE-2025-53014 in rootio-imagemagick - Patched by Root
Root has patched CVE-2025-53014 in the rootio-imagemagick package for Root:Debian:13. Multiple fixed versions available...
CVE-2025-55298
creationtimestamp| type| source ---|---|--- 2025-08-26 06:18:14+00:00| published-proof-of-concept| https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9ccg-6pjw-x645...
ROS-20250826-06
Vulnerability of SetQuantumFormat function of ImageMagick console graphic editor is related to incorrect calculation of buffer size when processing received packets. calculation of buffer size when processing received packets. Exploitation of the vulnerability may allow an attacker to cause a...
PT-2025-34795
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.13-28 ImageMagick versions prior to 7.1.2-2 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. Passing a geometry string containing only a colon ":" to...
PT-2025-34798
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.13-28 ImageMagick versions prior to 7.1.2-2 Description: ImageMagick is software used for editing and manipulating digital images. A format string bug exists in the InterpretImageFilename function where user...
Linux Distros Unpatched Vulnerability : CVE-2022-32545
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untruste...
ImageMagick 安全漏洞
ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert or write images in a variety of formats. A security vulnerability exists in ImageMagick versions prior to 6.9.13-28 and 7.1.2-2, which stems from a format string vulnerability that...
Linux Distros Unpatched Vulnerability : CVE-2021-20243
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior...
ROOT-OS-DEBIAN-13-CVE-2025-53101 CVE-2025-53101 in rootio-imagemagick - Patched by Root
Root has patched CVE-2025-53101 in the rootio-imagemagick package for Root:Debian:13. Multiple fixed versions available...
ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree
Summary - Target: ImageMagick commit ecc9a5eb456747374bae8e07038ba10b3d8821b3 - Type: Undefined Behavior function-type-mismatch in splay tree cloning callback - Impact: Deterministic abort under UBSan DoS in sanitizer builds. No crash in a non-sanitized build; likely low security impact. - Trigge...
GHSA-6HGW-6X87-578X ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree
Summary - Target: ImageMagick commit ecc9a5eb456747374bae8e07038ba10b3d8821b3 - Type: Undefined Behavior function-type-mismatch in splay tree cloning callback - Impact: Deterministic abort under UBSan DoS in sanitizer builds. No crash in a non-sanitized build; likely low security impact. - Trigge...
imagemagick: integer overflows in MNG magnification
Vulnerability Details The magnified size calculations in ReadOneMNGIMage in coders/png.c are unsafe and can overflow, leading to memory corruption. The source snippet below is heavily abbreviated due to the size of the function, but hopefully the important points are captured. c static Image...
Heap-based Buffer Overflow
Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...
ImageMagick has a heap-buffer-overflow
Summary While Processing a crafted TIFF file, imagemagick crashes. Details Following is the imagemagick version: imagemagickgit/build26jun23/bin/magick --version Version: ImageMagick 7.1.1-13 Beta Q16-HDRI x8664 56f478940:20230625 https://imagemagick.org Copyright: C 1999 ImageMagick Studio LLC...
Heap-based Buffer Overflow
Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...
GHSA-FFF3-4RP7-PX97 ImageMagick has a heap-buffer-overflow
Summary While Processing a crafted TIFF file, imagemagick crashes. Details Following is the imagemagick version: imagemagickgit/build26jun23/bin/magick --version Version: ImageMagick 7.1.1-13 Beta Q16-HDRI x8664 56f478940:20230625 https://imagemagick.org Copyright: C 1999 ImageMagick Studio LLC...
ImageMagick has a Memory Leak in magick stream
Summary In ImageMagick's magick stream command, specifying multiple consecutive %d format specifiers in a filename template causes a memory leak. Details - Vulnerability Type: Memory leak - Affected Version: ImageMagick 7.1.1-47 as of commit 82572afc, June 2025 Reproduction Tested Environment -...
GHSA-CFH4-9F7V-FHRC ImageMagick has a Memory Leak in magick stream
Summary In ImageMagick's magick stream command, specifying multiple consecutive %d format specifiers in a filename template causes a memory leak. Details - Vulnerability Type: Memory leak - Affected Version: ImageMagick 7.1.1-47 as of commit 82572afc, June 2025 Reproduction Tested Environment -...
ImageMagick has a Heap Buffer Overflow in InterpretImageFilename
Heap Buffer Overflow in InterpretImageFilename Summary A heap buffer overflow was identified in the InterpretImageFilename function of ImageMagick. The issue stems from an off-by-one error that causes out-of-bounds memory access when processing format strings containing consecutive percent signs...