CVE-2019-19952

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage...

CVE-2019-19948

CVE-2019-19948 — ImageMagick heap-based buffer overflow in the SGI writer. Root cause: WriteSGIImage in coders/sgi.c overruns the heap when handling SGI images. Affected software: ImageMagick 7.0.8-43 Q16 (and related entries in advisory history). Impact: the vulnerability is described as a heap-...

CVE-2019-19952

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage...

ImageMagick Resource Management Error Vulnerability (CNVD-2019-29205)

ImageMagick is the United States ImageMagick Studio, Inc. of a set of open source image processing software. A resource management error vulnerability exists in the coders/mat.c file in ImageMagick version 7.0.8-43 Q16. The vulnerability arises from mismanagement of system resources e.g., memory,...

CVE-2019-13454

ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c...

CVE-2019-13454

ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c...

DEBIAN-CVE-2019-13306

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors...

CVE-2019-13299

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel...

CVE-2019-13309

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c...

CVE-2019-13310

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c...

CVE-2019-13311

ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error...

CVE-2019-13309

CVE-2019-13309 : ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory caused by mishandling NoSuchImage in CLIListOperatorImages (MagickWand/operation.c). This can allow memory exhaustion leading to a denial of service. The advisory notes the issue and recommends updating ImageMagick ...

CVE-2019-13308

ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage...

CVE-2019-13301

CVE-2019-13301 affects ImageMagick, specifically 7.0.8-50 Q16, with memory leaks in AcquireMagickMemory caused by an AnnotateImage error. This can lead to memory exhaustion and potential denial of service; mitigation is to update ImageMagick to a newer release per the ALAS advisories (ALAS-2024-1...

CVE-2019-13299

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel...

CVE-2019-13295

ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled...

ImageMagick stack buffer overflow vulnerability (CNVD-2019-29231)

ImageMagick Studio ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A stack buffer overflow vulnerability exists in WritePNMImage in coders/pnm.c in ImageMagick 7.0.8-50 Q16. The vulnerability stems from the presence of an allocation erro...

ImageMagick heap buffer overflow vulnerability (CNVD-2019-21665)

ImageMagick Studio ImageMagick is a suite of open-source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. ImageMagick Studio A buffer overflow vulnerability exists in the 'SetPixelViaPixelInfo' function...

ImageMagick Multiple Heap Buffer Overflow Vulnerabilities

Description ImageMagick is prone to multiple heap-based buffer-overflow vulnerabilities. An attacker can exploit these issues to cause denial-of-service condition. Due to the nature of these issues, code execution may be possible but this has not been confirmed. ImageMagick version 7.0.8-43 Q16 i...

CVE-2019-11472

ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service divide-by-zero error by crafting an XWD image file in which the header indicates neither LSB first nor MSB first...