← Back

Imagemagick

imagemagick

Vendor: Imagemagick • 800 CVEs

CVEs (800)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
Nov 21, 2024
Jan 2, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.7-1 and older version are vulnerable to null pointer dereference in the MagickCore component and might lead to denial of service
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
Nov 21, 2024
Jan 1, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large loop) via a crafted mng image file.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed...Show more
In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage.Show less
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service via a crafted psd image file.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of service via a crafted PICT image file.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted PNG image file.
1Imagemagick
1Imagemagick
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which allows attackers to cause a denial of service via a crafted PGX image file.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted XPM image file.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service via a crafted MAT image file.
1Imagemagick
1Imagemagick
May 13, 2026
Dec 27, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSION check.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Dec 27, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Dec 14, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that...Show more
In ImageMagick 7.0.7-12 Q16, a large loop vulnerability was found in the function ExtractPostscript in coders/wpg.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted wpg image file that triggers a ReadWPGImage call.Show less
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 14, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted psd image file.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Dec 14, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Dec 11, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over-read via a crafted file, related to ReadOneMNGImage.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Dec 11, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Nov 5, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or in...Show more
The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or invalid memory allocation) or possibly have unspecified other impact via a malformed WPG file.Show less
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Oct 12, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to "Conditional jump or m...Show more
ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to "Conditional jump or move depends on uninitialised value(s)."Show less