← Back

Imagemagick

imagemagick

Vendor: Imagemagick • 739 CVEs

CVEs (739)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
Nov 21, 2024
Jan 1, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large loop) via a crafted mng image file.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed...Show more
In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage.Show less
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service via a crafted psd image file.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of service via a crafted PICT image file.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted PNG image file.
1Imagemagick
1Imagemagick
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which allows attackers to cause a denial of service via a crafted PGX image file.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted MAT image file.
1Imagemagick
1Imagemagick
May 13, 2026
Dec 27, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSION check.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Dec 14, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that...Show more
In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.Show less
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 14, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 14, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Dec 11, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Dec 11, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Nov 5, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or in...Show more
The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or invalid memory allocation) or possibly have unspecified other impact via a malformed WPG file.Show less
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Oct 12, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to "Conditional jump or m...Show more
ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to "Conditional jump or move depends on uninitialised value(s)."Show less
2Graphicsmagick
Imagemagick
2Graphicsmagick
Imagemagick
May 13, 2026
Oct 12, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a...Show more
ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library loaded into a process that operates on interesting data, this data sometimes can be leaked via the uninitialized palette.Show less