CVE-2022-48541
- EPSS 0.7%
- Veröffentlicht 22.08.2023 19:16:31
- Zuletzt bearbeitet 04.11.2025 19:15:41
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command.
CVE-2021-40211
- EPSS 0.09%
- Veröffentlicht 22.08.2023 19:16:21
- Zuletzt bearbeitet 21.11.2024 06:23:45
An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c.
CVE-2023-39978
- EPSS 0.04%
- Veröffentlicht 08.08.2023 06:15:47
- Zuletzt bearbeitet 21.11.2024 08:16:10
ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in Magick::Draw.
CVE-2023-3745
- EPSS 0.02%
- Veröffentlicht 24.07.2023 16:15:13
- Zuletzt bearbeitet 21.11.2024 08:17:58
A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. This issue may allow a local attacker to trick the user into opening a specially crafted file, triggering an out-of-bounds read error and all...
CVE-2023-34474
- EPSS 0.03%
- Veröffentlicht 16.06.2023 20:15:09
- Zuletzt bearbeitet 21.11.2024 08:07:20
A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in opening specially crafted file, triggering an out-of-bounds read error, allowing an application...
CVE-2023-34475
- EPSS 0.02%
- Veröffentlicht 16.06.2023 20:15:09
- Zuletzt bearbeitet 21.11.2024 08:07:20
A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a specially crafted file to convert, triggering an heap-use-after-free write error, allowing an appli...
CVE-2023-3195
- EPSS 0.02%
- Veröffentlicht 16.06.2023 20:15:09
- Zuletzt bearbeitet 21.11.2024 08:16:40
A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an attacker to trick the user into opening a specially crafted malicious tiff file, causing an application to crash, resulting in a denial of service.
CVE-2023-2157
- EPSS 0.02%
- Veröffentlicht 06.06.2023 20:15:12
- Zuletzt bearbeitet 07.01.2025 22:15:29
A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing.
CVE-2023-34151
- EPSS 0.07%
- Veröffentlicht 30.05.2023 22:15:11
- Zuletzt bearbeitet 02.12.2024 14:34:36
A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546).
CVE-2023-34152
- EPSS 70.69%
- Veröffentlicht 30.05.2023 22:15:11
- Zuletzt bearbeitet 13.01.2025 19:15:10
A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured.