CVE-2026-79902

A flaw in the Seattle FilmWorks plugin within GIMP allows denial of service when a user opens a specially crafted SFW image file . The root cause is a Variable-Length Array (VLA) allocation on the stack that lacks integer overflow/underflow checks, resulting in an unbounded stack allocation and a...

EUVD-2026-66425

A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array VLA on the stack without integer overflow checks, causing an unbounded stack allocation. This issue leads to an application crash, resulting i...

JLSEC-2026-945 ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

In ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereference and crash. AddressSanitizer:DEADLYSIGNAL ================================================================= ==1414421==ERROR:...

GHSA-P33R-FQW2-RQMM ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

In ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereference and crash. AddressSanitizer:DEADLYSIGNAL ================================================================= ==1414421==ERROR:...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in handling SFW image files, when temporary file creation fails. An attacker can cause the application to crash by submitting a malicious SFW image file. Remediation A fix was pushed into the master branch but n...

NULL Pointer Dereference

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

NULL Pointer Dereference

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

SUSE CVE-2017-8349

In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service memory leak via a crafted file...

SUSE CVE-2017-12983

Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

UBUNTU-CVE-2017-12983

Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

ImageMagick Denial of Service Vulnerability (CNVD-2017-06825)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. ImageMagick 7.0.5-5 version of the sfw.c file in the ReadSFWImage function has a security vulnerability. An attacker c...

Denial Of Service (DoS) Through Memory Leak

ImageMagick is vulnerable to Denial of Service DoS attacks. The vulnerability exists due to a memory leak when reading a corrupted SFW image...