15268 matches found
GHSA-6JWG-7Q3P-5FQM ImageMagick: Use-After-Free when freetype initialization fails
When the freetype initialization fails the method does not exit and uses memory that was freed...
ImageMagick: Use-After-Free when freetype initialization fails
When the freetype initialization fails the method does not exit and uses memory that was freed...
GHSA-VGHG-5JRG-2398 ImageMagick: Policy Bypass in script operation due to missing checks
The -script operation is missing policy checks and that could result in both reading from paths disallowed by the security policy...
ImageMagick: Policy Bypass in script operation due to missing checks
The -script operation is missing policy checks and that could result in both reading from paths disallowed by the security policy...
ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check
Due to a missing check in the APNG encoder and external delegates it is possibly to bypass the policy and write to a disallowed path...
GHSA-V3J6-27VC-7PW2 ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check
Due to a missing check in the APNG encoder and external delegates it is possibly to bypass the policy and write to a disallowed path...
ImageMagick: Heap-use-after-free via XMP profile could result in a crash
Because of a missing null check when parsing an XMP profile a use after free will happen that might result in a crash...
GHSA-QH5G-Q395-CX4J ImageMagick: Heap-use-after-free via XMP profile could result in a crash
Because of a missing null check when parsing an XMP profile a use after free will happen that might result in a crash...
GHSA-HC76-7MPC-QJQH ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
An incomplete fix of CVE-2026-25797 can result in code injection in the HTML encoder...
Improper Encoding or Escaping of Output
Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output through the HTML encoding. An attacker can execute arbitrary code by supplying specially crafted input that is not properly sanitized. Remediation A fix was pushed into the master branch but not y...
ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
An incomplete fix of CVE-2026-25797 can result in code injection in the HTML encoder...
ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219
An incomplete fix of CVE-2026-49219 could result in a policy bypass...
ImageMagick: Policy Bypass possible with matrix-backed operations
Matrix bases operations like -canny are missing a check for allowed memory allocation that could result allocating more memory than allowed...
GHSA-82MP-VP5C-9PF7 ImageMagick: Policy Bypass in concatenate operation due to missing checks
The -concatenate operation is missing policy checks and that could result in both reading and writing to paths disallowed by the security policy...
ImageMagick: Policy Bypass in concatenate operation due to missing checks
The -concatenate operation is missing policy checks and that could result in both reading and writing to paths disallowed by the security policy...
GHSA-C4V7-W88G-M6C4 ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments
Due to incorrect handling of arguments a heap buffer over-write can occur in the JP2 encoder...
ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments
Due to incorrect handling of arguments a heap buffer over-write can occur in the JP2 encoder...
EUVD-2026-41124
ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments...
EUVD-2026-41123
ImageMagick: Infinite Loop in connected-components when providing invalid arguments...
ImageMagick: Infinite Loop in connected-components when providing invalid arguments
When providing invalid arguments to the connected-components option an infinite loop will occur...