Imagemagick : Security Vulnerabilities, CVEs, Published In 2019 CVSS score >= 3
In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.
Max CVSS
9.8
EPSS Score
0.47%
Published
2019-12-24
Updated
2020-01-02
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_profile and LocaleNCompare.
Max CVSS
9.1
EPSS Score
0.33%
Published
2019-12-24
Updated
2022-10-31
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
Max CVSS
9.8
EPSS Score
0.93%
Published
2019-12-24
Updated
2022-10-31
ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly restricted in coders/svg.c, related to SVG and libxml2.
Max CVSS
6.5
EPSS Score
0.18%
Published
2019-11-11
Updated
2021-04-28
In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a use-after-free.
Max CVSS
8.8
EPSS Score
0.29%
Published
2019-10-14
Updated
2019-10-18
ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.
Max CVSS
8.8
EPSS Score
0.43%
Published
2019-10-14
Updated
2021-04-20
ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.
Max CVSS
8.8
EPSS Score
0.22%
Published
2019-10-14
Updated
2021-04-20
ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.
Max CVSS
6.5
EPSS Score
0.14%
Published
2019-09-23
Updated
2022-04-22
ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.
Max CVSS
6.5
EPSS Score
0.11%
Published
2019-09-23
Updated
2022-01-01
ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.
Max CVSS
6.5
EPSS Score
0.14%
Published
2019-09-23
Updated
2022-04-22
ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.
Max CVSS
6.5
EPSS Score
0.14%
Published
2019-09-23
Updated
2022-04-22
ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.
Max CVSS
6.5
EPSS Score
0.30%
Published
2019-09-23
Updated
2022-01-01
ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.
Max CVSS
6.5
EPSS Score
0.14%
Published
2019-09-23
Updated
2022-04-22
WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and TIFFWriteDirectoryTagColormap in tif_dirwrite.c of LibTIFF. NOTE: this occurs because of an incomplete fix for CVE-2019-11597.
Max CVSS
6.5
EPSS Score
0.13%
Published
2019-08-18
Updated
2023-03-03
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c.
Max CVSS
8.8
EPSS Score
2.69%
Published
2019-08-18
Updated
2020-07-03
The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472.
Max CVSS
6.5
EPSS Score
0.72%
Published
2019-08-18
Updated
2020-09-08
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
Max CVSS
6.5
EPSS Score
1.23%
Published
2019-08-12
Updated
2020-08-19
In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file.
Max CVSS
6.5
EPSS Score
0.42%
Published
2019-08-12
Updated
2023-03-02
ImageMagick 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.
Max CVSS
6.5
EPSS Score
0.39%
Published
2019-07-09
Updated
2020-08-19
In ImageMagick 7.0.8-50 Q16, ComplexImages in MagickCore/fourier.c has a heap-based buffer over-read because of incorrect calls to GetCacheViewVirtualPixels.
Max CVSS
8.8
EPSS Score
0.97%
Published
2019-07-07
Updated
2020-09-08
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.
Max CVSS
6.5
EPSS Score
0.25%
Published
2019-07-05
Updated
2023-02-23
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c.
Max CVSS
6.5
EPSS Score
0.28%
Published
2019-07-05
Updated
2023-03-02
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c.
Max CVSS
6.5
EPSS Score
0.35%
Published
2019-07-05
Updated
2023-02-23
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow in MagickCore/fourier.c in ComplexImage.
Max CVSS
8.8
EPSS Score
0.62%
Published
2019-07-05
Updated
2023-03-02
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows.
Max CVSS
7.8
EPSS Score
0.15%
Published
2019-07-05
Updated
2023-02-23