CVE-2023-2157
- EPSS 0.03%
- Veröffentlicht 06.06.2023 20:15:12
- Zuletzt bearbeitet 07.01.2025 22:15:29
A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.
CVE-2023-34151
- EPSS 0.06%
- Veröffentlicht 30.05.2023 22:15:11
- Zuletzt bearbeitet 02.12.2024 14:34:36
A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546).
CVE-2023-34152
- EPSS 74.84%
- Veröffentlicht 30.05.2023 22:15:11
- Zuletzt bearbeitet 13.01.2025 19:15:10
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.
CVE-2023-34153
- EPSS 0.7%
- Veröffentlicht 30.05.2023 22:15:11
- Zuletzt bearbeitet 27.02.2026 21:17:21
A vulnerability was found in ImageMagick. This security flaw causes a shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding.
CVE-2023-1906
- EPSS 0.04%
- Veröffentlicht 12.04.2023 22:15:11
- Zuletzt bearbeitet 10.02.2025 17:15:15
A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c. An attacker could pass specially crafted file to convert, triggering an out-of-bounds read error, allowing an app...
CVE-2023-1289
- EPSS 0.1%
- Veröffentlicht 23.03.2023 20:15:14
- Zuletzt bearbeitet 21.11.2024 07:38:50
A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many...
CVE-2022-44267
- EPSS 22.09%
- Veröffentlicht 06.02.2023 21:15:09
- Zuletzt bearbeitet 26.03.2025 15:15:40
ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert process could be left waiting for stdin input.
CVE-2022-44268
- EPSS 88.53%
- Veröffentlicht 06.02.2023 21:15:09
- Zuletzt bearbeitet 26.03.2025 15:15:40
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).
CVE-2022-3213
- EPSS 0.03%
- Veröffentlicht 19.09.2022 18:15:09
- Zuletzt bearbeitet 21.11.2024 07:19:03
A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service.
CVE-2022-1115
- EPSS 0.04%
- Veröffentlicht 29.08.2022 15:15:10
- Zuletzt bearbeitet 21.11.2024 06:40:04
A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to ImageMagick for conversion, potentially leading...