Imagemagick
by ImageMagick
Source repositories
CVEs (819)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-13305 | Hig | 0.00 | 7.8 | 0.02 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error. | ||
| CVE-2019-13304 | Hig | 0.00 | 7.8 | 0.02 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment. | ||
| CVE-2019-13303 | Hig | 0.00 | 8.8 | 0.02 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in CompositeImage. | ||
| CVE-2019-13302 | Hig | 0.00 | 8.8 | 0.02 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages. | ||
| CVE-2019-13301 | Med | 0.00 | 6.5 | 0.03 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error. | ||
| CVE-2019-13300 | Hig | 0.00 | 8.8 | 0.03 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns. | ||
| CVE-2019-13299 | Hig | 0.00 | 8.8 | 0.02 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel. | ||
| CVE-2019-13298 | Hig | 0.00 | 8.8 | 0.02 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enhance.c error. | ||
| CVE-2019-13297 | Hig | 0.00 | 8.8 | 0.03 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled. | ||
| CVE-2019-13296 | Med | 0.00 | 6.5 | 0.02 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value. | ||
| CVE-2019-13295 | Hig | 0.00 | 8.8 | 0.03 | Jul 5, 2019 | ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled. | ||
| CVE-2019-13137 | Med | 0.00 | 6.5 | 0.02 | Jul 1, 2019 | ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c. | ||
| CVE-2019-13136 | Hig | 0.00 | 7.8 | 0.01 | Jul 1, 2019 | ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c. | ||
| CVE-2019-13135 | Hig | 0.00 | 8.8 | 0.03 | Jul 1, 2019 | ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c. | ||
| CVE-2019-13134 | Med | 0.00 | 5.5 | 0.01 | Jul 1, 2019 | ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c. | ||
| CVE-2019-13133 | Med | 0.00 | 5.5 | 0.01 | Jul 1, 2019 | ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c. | ||
| CVE-2019-10131 | Hig | 0.00 | 7.1 | 0.01 | Apr 30, 2019 | An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program. | ||
| CVE-2019-11472 | Med | 0.00 | 6.5 | 0.03 | Apr 23, 2019 | ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (divide-by-zero error) by crafting an XWD image file in which the header indicates neither LSB first nor MSB first. | ||
| CVE-2019-11470 | Med | 0.00 | 6.5 | 0.04 | Apr 23, 2019 | The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for… | ||
| CVE-2019-10714 | Med | 0.00 | 6.5 | 0.02 | Apr 2, 2019 | LocaleLowercase in MagickCore/locale.c in ImageMagick before 7.0.8-32 allows out-of-bounds access, leading to a SIGSEGV. |
- risk 0.00cvss 7.8epss 0.02
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error.
- risk 0.00cvss 7.8epss 0.02
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.
- risk 0.00cvss 8.8epss 0.02
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/composite.c in CompositeImage.
- risk 0.00cvss 8.8epss 0.02
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages.
- risk 0.00cvss 6.5epss 0.03
ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.
- risk 0.00cvss 8.8epss 0.03
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns.
- risk 0.00cvss 8.8epss 0.02
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel.
- risk 0.00cvss 8.8epss 0.02
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enhance.c error.
- risk 0.00cvss 8.8epss 0.03
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled.
- risk 0.00cvss 6.5epss 0.02
ImageMagick 7.0.8-50 Q16 has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value.
- risk 0.00cvss 8.8epss 0.03
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled.
- risk 0.00cvss 6.5epss 0.02
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.
- risk 0.00cvss 7.8epss 0.01
ImageMagick before 7.0.8-50 has an integer overflow vulnerability in the function TIFFSeekCustomStream in coders/tiff.c.
- risk 0.00cvss 8.8epss 0.03
ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c.
- risk 0.00cvss 5.5epss 0.01
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c.
- risk 0.00cvss 5.5epss 0.01
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c.
- risk 0.00cvss 7.1epss 0.01
An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program.
- risk 0.00cvss 6.5epss 0.03
ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (divide-by-zero error) by crafting an XWD image file in which the header indicates neither LSB first nor MSB first.
- risk 0.00cvss 6.5epss 0.04
The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service (uncontrolled resource consumption) by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for…
- risk 0.00cvss 6.5epss 0.02
LocaleLowercase in MagickCore/locale.c in ImageMagick before 7.0.8-32 allows out-of-bounds access, leading to a SIGSEGV.
Page 39 of 41