Imagemagick Studio ImageMagick Input Validation Error Vulnerability (CNVD-2020-70259)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. An input validation error vulnerability exists in versions prior to ImageMagick...

ImageMagick Input Validation Error Vulnerability (CNVD-2021-10262)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. An input validation error vulnerability exists in ImageMagick, where MagickCore/quantum.h in versions prior to ImageMagick 7.0.9-0 has a range of representable values...

ImageMagick Digital Error Vulnerability (CNVD-2021-10255)

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A numeric error vulnerability exists in MagickCore/segment.c in versions of ImageMagick prior to 7.0.9-0. An attacker can exploit this vulnerability by submitting a...

CVE-2020-29599

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. A NULL pointer dereference vulnerability in the function saveBinaryCLProgram in magick/opencl.c allows an attacker to execute arbitrary code on the host OS...

Memory Leak

In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A memory leak in WritePSDChannel in coders/psd.c allows an attacker to crash the application...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists in the ReadBMPImage function of the coders/bmp.c due to the infinite loop, allowing a malicious user to crash the application via a crafted bmp file...

Buffer Overflow

ImageMagick is vulnerable to buffer overflow. This vulnerability allows attackers to cause a denial of service via a crafted SVG image file...

Out-of-Bounds Read

ImageMagick is vulnerable to out-of-bounds read. The vulnerability can be triggered via an image with a width or height value that exceeds the actual size of the image...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service. An attacker is able to cause the vulnerability via a crafted file...

Undefined Behavior

ImageMagick is vulnerable to undefined behavior in the form of out-of-range and integer overflows. An attacker may trigger the vulnerability by supplying a crafted input file to be processed by ImageMagick...

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. A heap-based buffer overflow in WriteOnePNGImage in coders/png.c allows an attacker to execute arbitrary code via a malicious file...

Integer Overflow

ImageMagick is vulnerable to integer overflows. Rounding calculations performed on unconstrained pixel offsets could lead to integer overflows resulting in a system hang or other unexpected behaviors...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. An out-of-bounds read in the PALM image coder at coders/palm.c due to an improper call to AcquireQuantumMemory in routine WritePALMImage allows an attacker to crash the application...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. A signed integer overflow in MagickCore/histogram.c allows an attacker to crash the application...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. An out-of-bounds write in WriteOnePNGImage of the PNG coder in coders/png.c due to an improper call to AcquireVirtualMemory and memset allows an attacker to crash the application...

Memory Exhaustion

ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists through coders/bmp.c when a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned int...

Undefined Behavior

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...