imagemagick Vulnerability Advisory Catalog

Total 768 security vulnerabilities recorded for imagemagick software and firmware.

← Back to All Vendors
Component: imagemagick

A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/colorspace.c may trigger undefi...

📅 2021-05-11
CVSS 7.5 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of MagickCore/visual-effects.c ma...

📅 2021-05-11
CVSS 7.5 Dossier →
Component: imagemagick

A heap based buffer overflow in coders/tiff.c may result in program crash and denial of service in ImageMagick before 7.0.10-45....

📅 2021-03-26
CVSS 5.5 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefi...

📅 2021-03-09
CVSS 5.5 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined beha...

📅 2021-03-09
CVSS 5.5 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger ...

📅 2021-03-09
CVSS 5.5 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefine...

📅 2021-03-09
CVSS 5.5 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behav...

📅 2021-03-09
CVSS 5.5 Dossier →
Component: imagemagick

In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageM...

📅 2021-02-23
CVSS 3.3 Dossier →
Component: imagemagick

A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is proce...

📅 2021-02-06
CVSS 5.5 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behav...

📅 2020-12-08
CVSS 3.3 Dossier →
Component: imagemagick

A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outs...

📅 2020-12-08
CVSS 3.3 Dossier →
Component: imagemagick

In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefine...

📅 2020-12-08
CVSS 5.5 Dossier →
Component: imagemagick

in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image d...

📅 2020-12-08
CVSS 3.3 Dossier →
Component: imagemagick

In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMa...

📅 2020-12-08
CVSS 3.3 Dossier →
Component: imagemagick

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted i...

📅 2020-12-08
CVSS 5.5 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger...

📅 2020-12-08
CVSS 7.1 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger ...

📅 2020-12-08
CVSS 3.3 Dossier →
Component: imagemagick

A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed ...

📅 2020-12-08
CVSS 5.5 Dossier →
Component: imagemagick

In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /...

📅 2020-12-08
CVSS 5.5 Dossier →
Component: imagemagick

In the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets was causi...

📅 2020-12-08
CVSS 3.3 Dossier →
Component: imagemagick

WriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an out-of-bounds READ via heap-buff...

📅 2020-12-08
CVSS 5.5 Dossier →
Component: imagemagick

TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `"dc:format=\"image/dng\"` within `pro...

📅 2020-12-08
CVSS 5.5 Dossier →
Component: imagemagick

There are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is possible during simple math calculations. This occurs ...

📅 2020-12-08
CVSS 3.3 Dossier →
Page 9 of 32 (768 Total Records)