Imagemagick
Page 4 of 7 — Imagemagick CVEs from a corpus of 615, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-13295 | High | 8.8 | 2019-07-05 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled. |
CVE-2019-13137 | Medium | 6.5 | 2019-07-01 | ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c. |
CVE-2019-13136 | High | 7.8 | 2019-07-01 | ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c. |
CVE-2019-13135 | High | 8.8 | 2019-07-01 | ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c. |
CVE-2019-13134 | Medium | 5.5 | 2019-07-01 | ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c. |
CVE-2019-13133 | Medium | 5.5 | 2019-07-01 | ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c. |
CVE-2019-12979 | High | 7.8 | 2019-06-26 | ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage… |
CVE-2019-12978 | High | 7.8 | 2019-06-26 | ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c. |
CVE-2019-12977 | High | 7.8 | 2019-06-26 | ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c. |
CVE-2019-12976 | Medium | 5.5 | 2019-06-26 | ImageMagick 7.0.8-34 has a memory leak in the ReadPCLImage function in coders/pcl.c. |
CVE-2019-12975 | Medium | 5.5 | 2019-06-26 | ImageMagick 7.0.8-34 has a memory leak vulnerability in the WriteDPXImage function in coders/dpx.c. |
CVE-2019-12974 | Medium | 5.5 | 2019-06-26 | A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 allows remote… |
CVE-2017-12806 | High | 7.5 | 2019-05-09 | In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function format8BIM, which allows attackers to cause a denial of service. |
CVE-2017-12805 | High | 7.5 | 2019-05-09 | In ImageMagick 7.0.6-6, a memory exhaustion vulnerability was found in the function ReadTIFFImage, which allows attackers to cause a denial of service. |
CVE-2019-10131 | High | 7.1 | 2019-04-30 | An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker… |
CVE-2019-11598 | High | 8.1 | 2019-04-29 | In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial o… |
CVE-2019-11597 | High | 8.1 | 2019-04-29 | In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial… |
CVE-2019-11472 | Medium | 6.5 | 2019-04-23 | ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (divide-by-zero error… |
CVE-2019-11470 | Medium | 6.5 | 2019-04-23 | The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon… |
CVE-2019-10714 | Medium | 6.5 | 2019-04-02 | LocaleLowercase in MagickCore/locale.c in ImageMagick before 7.0.8-32 allows out-of-bounds access, leading to a SIGSEGV. |
CVE-2019-10650 | High | 8.1 | 2019-03-30 | In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial… |
CVE-2019-10649 | Medium | 5.5 | 2019-03-30 | In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via… |
CVE-2019-9956 | High | 8.8 | 2019-03-24 | In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which allows an attacker to cause a denial of s… |
CVE-2019-7175 | High | 7.5 | 2019-03-07 | In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c. |
CVE-2019-7398 | High | 7.5 | 2019-02-05 | In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c. |
CVE-2019-7397 | High | 7.5 | 2019-02-05 | In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c. |
CVE-2019-7396 | High | 7.5 | 2019-02-05 | In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c. |
CVE-2019-7395 | High | 7.5 | 2019-02-05 | In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c. |
CVE-2018-20467 | Medium | 6.5 | 2018-12-26 | In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers c… |
CVE-2018-18544 | Medium | 6.5 | 2018-10-21 | There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in Graphics… |
CVE-2018-18025 | Medium | 6.5 | 2018-10-07 | In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of s… |
CVE-2018-18024 | Medium | 6.5 | 2018-10-07 | In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerabilit… |
CVE-2018-18023 | Medium | 6.5 | 2018-10-07 | In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of… |
CVE-2018-18016 | Medium | 6.5 | 2018-10-05 | ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c. |
CVE-2018-17967 | Medium | 6.5 | 2018-10-03 | ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c. |
CVE-2018-17966 | Medium | 6.5 | 2018-10-03 | ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c. |
CVE-2018-17965 | Medium | 6.5 | 2018-10-03 | ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c. |
CVE-2018-16750 | Medium | 6.5 | 2018-09-09 | In ImageMagick 7.0.7-29 and earlier, a memory leak in the formatIPTCfromBuffer function in coders/meta.c was found. |
CVE-2018-16749 | Medium | 6.5 | 2018-09-09 | In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service (WriteBlob asserti… |
CVE-2018-16645 | Medium | 6.5 | 2018-09-06 | There is an excessive memory allocation issue in the functions ReadBMPImage of coders/bmp.c and ReadDIBImage of coders/dib.c in ImageMagick 7.0.8-11, which all… |
CVE-2018-16644 | Medium | 6.5 | 2018-09-06 | There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remo… |
CVE-2018-16643 | Medium | 6.5 | 2018-09-06 | The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0… |
CVE-2018-16642 | Medium | 6.5 | 2018-09-06 | The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-b… |
CVE-2018-16641 | Medium | 6.5 | 2018-09-06 | ImageMagick 7.0.8-6 has a memory leak vulnerability in the TIFFWritePhotoshopLayers function in coders/tiff.c. |
CVE-2018-16640 | Medium | 6.5 | 2018-09-06 | ImageMagick 7.0.8-5 has a memory leak vulnerability in the function ReadOneJNGImage in coders/png.c. |
CVE-2018-16413 | High | 8.8 | 2018-09-03 | ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the MagickCore/quantum-private.h PushShortPixel function when called from the coders/psd.c ParseI… |
CVE-2018-16412 | High | 8.8 | 2018-09-03 | ImageMagick 7.0.8-11 Q16 has a heap-based buffer over-read in the coders/psd.c ParseImageResourceBlocks function. |
CVE-2018-16329 | Critical | 9.8 | 2018-09-01 | In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty function in MagickCore/property.c. |
CVE-2018-16328 | Critical | 9.8 | 2018-09-01 | In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c. |
CVE-2018-16323 | Medium | 6.5 | 2018-09-01 | ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel value. If the affect… |
CVE-2018-15607 | Medium | 6.5 | 2018-08-21 | In ImageMagick 7.0.8-11 Q16, a tiny input file 0x50 0x36 0x36 0x36 0x36 0x4c 0x36 0x38 0x36 0x36 0x36 0x36 0x36 0x36 0x1f 0x35 0x50 0x00 can result in a hang o… |
CVE-2018-14551 | Critical | 9.8 | 2018-07-23 | The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption. |
CVE-2018-14437 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c. |
CVE-2018-14436 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c. |
CVE-2018-14435 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c. |
CVE-2018-14434 | Medium | 6.5 | 2018-07-20 | ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c. |
CVE-2018-13153 | Medium | 6.5 | 2018-07-05 | In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c. |
CVE-2018-12600 | High | 8.8 | 2018-06-20 | In ImageMagick 7.0.8-3 Q16, ReadDIBImage and WriteDIBImage in coders/dib.c allow attackers to cause an out of bounds write via a crafted file. |
CVE-2018-12599 | High | 8.8 | 2018-06-20 | In ImageMagick 7.0.8-3 Q16, ReadBMPImage and WriteBMPImage in coders/bmp.c allow attackers to cause an out of bounds write via a crafted file. |
CVE-2018-11656 | Medium | 6.5 | 2018-06-01 | In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function ReadDCMImage in coders/dcm.c, which allows attackers to cause a denia… |
CVE-2018-11655 | Medium | 6.5 | 2018-06-01 | In ImageMagick 7.0.7-20 Q16 x86_64, a memory leak vulnerability was found in the function GetImagePixelCache in MagickCore/cache.c, which allows attackers to c… |
CVE-2018-11625 | High | 8.8 | 2018-05-31 | In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file. |
CVE-2018-11624 | High | 8.8 | 2018-05-31 | In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file. |
CVE-2018-11251 | Medium | 6.5 | 2018-05-18 | In ImageMagick 7.0.7-23 Q16 x86_64 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial… |
CVE-2017-18273 | Medium | 6.5 | 2018-05-18 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to… |
CVE-2017-18272 | Medium | 6.5 | 2018-05-18 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of servic… |
CVE-2017-18271 | Medium | 6.5 | 2018-05-18 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers… |
CVE-2018-10805 | Medium | 6.5 | 2018-05-08 | ImageMagick version 7.0.7-28 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c. |
CVE-2018-10804 | Medium | 6.5 | 2018-05-08 | ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c. |
CVE-2018-10177 | Medium | 6.5 | 2018-04-16 | In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability… |
CVE-2018-9135 | High | 8.8 | 2018-03-30 | In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c. |
CVE-2018-9133 | Medium | 6.5 | 2018-03-30 | ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions (coders/tiff.c), which results in a hang (tens of minutes)… |
CVE-2017-18254 | Medium | 6.5 | 2018-03-27 | An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers… |
CVE-2017-18253 | Medium | 6.5 | 2018-03-27 | An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LoadOpenCLDevices in MagickCore/opencl.c, whic… |
CVE-2017-18252 | Medium | 6.5 | 2018-03-27 | An issue was discovered in ImageMagick 7.0.7. The MogrifyImageList function in MagickWand/mogrify.c allows attackers to cause a denial of service (assertion fa… |
CVE-2017-18251 | Medium | 6.5 | 2018-03-27 | An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function ReadPCDImage in coders/pcd.c, which allow remote attackers… |
CVE-2017-18250 | Medium | 6.5 | 2018-03-27 | An issue was discovered in ImageMagick 7.0.7. A NULL pointer dereference vulnerability was found in the function LogOpenCLBuildFailure in MagickCore/opencl.c… |
CVE-2018-8960 | High | 8.8 | 2018-03-23 | The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-26 Q16 does not properly restrict memory allocation, leading to a heap-based buffer over-read. |
CVE-2018-8804 | High | 8.8 | 2018-03-20 | WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application… |
CVE-2017-18211 | Critical | 9.8 | 2018-03-01 | In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a program-lookup result… |
CVE-2017-18210 | Critical | 9.8 | 2018-03-01 | In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocat… |
CVE-2017-18209 | High | 8.8 | 2018-03-01 | In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulnerability occurs because a memory allocat… |
CVE-2018-7470 | Medium | 6.5 | 2018-02-25 | An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service (segmentat… |
CVE-2018-7443 | Medium | 6.5 | 2018-02-23 | The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of image data in a file, which allows remote atta… |
CVE-2018-6930 | Medium | 6.5 | 2018-02-13 | A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file of ImageMagick 7.0.7-22 allows a remote attacker to cause… |
CVE-2018-6876 | Medium | 6.5 | 2018-02-09 | The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers to cause a denial… |
CVE-2018-6405 | Medium | 6.5 | 2018-01-30 | In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer. T… |
CVE-2017-18029 | Medium | 6.5 | 2018-01-12 | In ImageMagick 7.0.6-10 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial… |
CVE-2017-18028 | Medium | 6.5 | 2018-01-12 | In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allow remote attackers to cause a… |
CVE-2017-18027 | Medium | 6.5 | 2018-01-12 | In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial… |
CVE-2018-5358 | Medium | 6.5 | 2018-01-12 | ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in code… |
CVE-2018-5357 | Medium | 6.5 | 2018-01-12 | ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c. |
CVE-2018-5248 | High | 8.8 | 2018-01-05 | In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixel_decode function. |
CVE-2018-5247 | Medium | 6.5 | 2018-01-05 | In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c. |
CVE-2018-5246 | Medium | 6.5 | 2018-01-05 | In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c. |
CVE-2017-18022 | Medium | 6.5 | 2018-01-05 | In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c. |
CVE-2017-1000476 | Medium | 6.5 | 2018-01-03 | ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of ser… |
CVE-2017-1000445 | Medium | 6.5 | 2018-01-02 | ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might lead to denial of service |
CVE-2017-18008 | Medium | 6.5 | 2018-01-01 | In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c. |
CVE-2017-17934 | Medium | 6.5 | 2017-12-27 | ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage… |