← Back

Imagemagick

imagemagick

740 CVEs • 3 products

Products (3)

Click to collapse
Toggle

CVEs (740)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Oct 10, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Oct 10, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Oct 5, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Oct 5, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Oct 5, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Oct 5, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Oct 5, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c.
1Imagemagick
1Imagemagick
May 13, 2026
Oct 3, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at...Show more
A use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows attackers to crash the application via a crafted font file, because the FT_Done_Glyph function (from FreeType 2) is called at an incorrect place in the ImageMagick code.Show less
1Imagemagick
1Imagemagick
May 13, 2026
Sep 26, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The ReadCAPTIONImage function in coders/caption.c in ImageMagick 7.0.7-3 allows remote attackers to cause a denial of service (infinite loop) via a crafted font file.
1Imagemagick
1Imagemagick
May 13, 2026
Sep 26, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in...Show more
The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors.Show less
1Imagemagick
1Imagemagick
May 13, 2026
Sep 22, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCor...Show more
In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to cause a denial of service (memory consumption in ResizeMagickMemory in MagickCore/memory.c) via a crafted file.Show less
1Imagemagick
1Imagemagick
May 13, 2026
Sep 21, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG...Show more
GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted SVG document, a different vulnerability than CVE-2017-10928.Show less
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Sep 21, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Sep 21, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Sep 21, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c.
3Canonical
DebianImagemagick
3Debian Linux
ImagemagickUbuntu Linux
May 13, 2026
Sep 20, 2017
N/A· v4
8.1 HIGH· v3
5.8 MEDIUM· v2
In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an applic...Show more
In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash.Show less
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Sep 18, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Sep 18, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c.
2Canonical
Imagemagick
2Imagemagick
Ubuntu Linux
May 13, 2026
Sep 18, 2017
N/A· v4
6.5 MEDIUM· v3
7.1 HIGH· v2
ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c.
2Debian
Imagemagick
2Debian Linux
Imagemagick
May 13, 2026
Sep 18, 2017
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred, which allows remote attackers to cau...Show more
The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIFFGetField return values imply that data validation has occurred, which allows remote attackers to cause a denial of service (use-after-free after an invalid call to TIFFSetField, and application crash) via a crafted file.Show less