imagemagick Vulnerability Advisory Catalog

Total 768 security vulnerabilities recorded for imagemagick software and firmware.

← Back to All Vendors
Component: imagemagick

A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and other coder...

๐Ÿ“… 2023-05-30
CVSS 5.5 Dossier →
CVE-2023-1906 MEDIUM
Component: imagemagick

A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker c...

๐Ÿ“… 2023-04-12
CVSS 5.5 Dossier →
CVE-2023-1289 MEDIUM
Component: imagemagick

A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remo...

๐Ÿ“… 2023-03-23
CVSS 5.5 Dossier →
Component: imagemagick

ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded t...

๐Ÿ“… 2023-02-06
CVSS 6.5 Dossier →
Component: imagemagick

ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert process could be left waiting for ...

๐Ÿ“… 2023-02-06
CVSS 6.5 Dossier →
CVE-2022-3213 MEDIUM
Component: imagemagick

A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a c...

๐Ÿ“… 2022-09-19
CVSS 5.5 Dossier →
CVE-2022-1115 MEDIUM
Component: imagemagick

A heap-buffer-overflow flaw was found in ImageMagickโ€™s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an at...

๐Ÿ“… 2022-08-29
CVSS 5.5 Dossier →
Component: imagemagick

A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an ...

๐Ÿ“… 2022-08-29
CVSS 7.1 Dossier →
Component: imagemagick

A vulnerability was found in ImageMagick-7.0.11-5, where executing a crafted file with the convert command, ASAN detects memory leaks....

๐Ÿ“… 2022-08-26
CVSS 3.3 Dossier →
Component: imagemagick

An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GetPixelInde...

๐Ÿ“… 2022-08-25
CVSS 5.5 Dossier →
Component: imagemagick

In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte ali...

๐Ÿ“… 2022-06-16
CVSS 7.8 Dossier →
Component: imagemagick

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted o...

๐Ÿ“… 2022-06-16
CVSS 7.8 Dossier →
Component: imagemagick

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted o...

๐Ÿ“… 2022-06-16
CVSS 7.8 Dossier →
Component: imagemagick

ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow....

๐Ÿ“… 2022-05-08
CVSS 7.8 Dossier →
Component: imagemagick

A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm.c file. This vulnerability is triggered when an attacker pas...

๐Ÿ“… 2022-04-29
CVSS 7.1 Dossier →
CVE-2021-4219 MEDIUM
Component: imagemagick

A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an ...

๐Ÿ“… 2022-03-23
CVSS 5.5 Dossier →
Component: imagemagick

A heap-based buffer overflow vulnerability was found in ImageMagick in versions prior to 7.0.11-14 in ReadTIFFImage() in coders/tiff.c. This issue is ...

๐Ÿ“… 2022-02-24
CVSS 7.5 Dossier →
CVE-2021-3596 MEDIUM
Component: imagemagick

A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.c. This issue is due to not ch...

๐Ÿ“… 2022-02-24
CVSS 6.5 Dossier →
Component: imagemagick

A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. This flaw allows an atta...

๐Ÿ“… 2021-11-19
CVSS 7.8 Dossier →
Component: imagemagick

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both ...

๐Ÿ“… 2021-09-13
CVSS 4.4 Dossier →
Component: imagemagick

In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c....

๐Ÿ“… 2021-05-14
CVSS 3.3 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. Th...

๐Ÿ“… 2021-05-11
CVSS 7.5 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behav...

๐Ÿ“… 2021-05-11
CVSS 7.5 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage() in the MagickCore/colorspace.c may trigger...

๐Ÿ“… 2021-05-11
CVSS 7.5 Dossier →
Page 8 of 32 (768 Total Records)