imagemagick Vulnerability Advisory Catalog

Total 768 security vulnerabilities recorded for imagemagick software and firmware.

← Back to All Vendors
Component: imagemagick

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 25...

📅 2020-12-08
CVSS 5.5 Dossier →
Component: imagemagick

In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write late...

📅 2020-12-08
CVSS 6.1 Dossier →
Component: imagemagick

A call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap-buffer-ove...

📅 2020-12-08
CVSS 5.5 Dossier →
Component: imagemagick

ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF ...

📅 2020-12-07
CVSS 7.8 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger und...

📅 2020-12-04
CVSS 3.3 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behav...

📅 2020-12-04
CVSS 3.3 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undef...

📅 2020-12-04
CVSS 3.3 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefin...

📅 2020-12-04
CVSS 3.3 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undef...

📅 2020-12-04
CVSS 3.3 Dossier →
Component: imagemagick

In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of representab...

📅 2020-12-04
CVSS 3.3 Dossier →
Component: imagemagick

Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to a...

📅 2020-12-04
CVSS 5.5 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefin...

📅 2020-12-04
CVSS 3.3 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undef...

📅 2020-12-04
CVSS 7.8 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefin...

📅 2020-12-04
CVSS 3.3 Dossier →
Component: imagemagick

In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which causes out-o...

📅 2020-12-03
CVSS 3.3 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefine...

📅 2020-12-03
CVSS 3.3 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behav...

📅 2020-12-03
CVSS 5.5 Dossier →
Component: imagemagick

WritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which could lead to values outside the range of representable t...

📅 2020-12-03
CVSS 3.3 Dossier →
Component: imagemagick

In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero condition when a crafted input f...

📅 2020-12-03
CVSS 5.5 Dossier →
Component: imagemagick

In IntensityCompare() of /MagickCore/quantize.c, a double value was being casted to int and returned, which in some cases caused a value outside the r...

📅 2020-12-03
CVSS 3.3 Dossier →
Component: imagemagick

Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7....

📅 2020-11-20
CVSS 7.8 Dossier →
Component: imagemagick

ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c, which may cause a denial of service....

📅 2020-10-22
CVSS 3.3 Dossier →
Component: imagemagick

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding....

📅 2020-06-07
CVSS 7.1 Dossier →
Component: imagemagick

In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c. It can be triggered via an im...

📅 2020-03-10
CVSS 5.5 Dossier →
Page 10 of 32 (768 Total Records)