← Back

Imagemagick

imagemagick

740 CVEs • 3 products

Products (3)

Click to collapse
Toggle

CVEs (740)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Debian
ImagemagickOpensuse Project
3Debian Linux
ImagemagickLeap
May 13, 2026
Mar 23, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The IsPixelGray function in MagickCore/pixel-accessor.h in ImageMagick 7.0.3-8 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted image file.
1Imagemagick
1Imagemagick
May 13, 2026
Mar 23, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer overflow in coders/tiff.c in ImageMagick before 6.9.4-1 allows remote attackers to cause a denial of service (application crash) or have unspecified other impact via a crafted TIFF file.
1Imagemagick
1Imagemagick
May 13, 2026
Mar 23, 2017
N/A· v4
5.5 MEDIUM· v3
7.1 HIGH· v2
Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick before 6.9.6-3 allows remote attackers to cause a denial of service (memory consumption) via a crafted image file.
1Imagemagick
1Imagemagick
May 13, 2026
Mar 23, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer overflow in the WriteGROUP4Image function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file...Show more
Buffer overflow in the WriteGROUP4Image function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.Show less
1Imagemagick
1Imagemagick
May 13, 2026
Mar 23, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer overflow in the sixel_decode function in coders/sixel.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
1Imagemagick
1Imagemagick
May 13, 2026
Mar 23, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer overflow in the WritePDBImage function in coders/pdb.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
1Imagemagick
1Imagemagick
May 13, 2026
Mar 23, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer overflow in the WriteMAPImage function in coders/map.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
1Imagemagick
1Imagemagick
May 13, 2026
Mar 23, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The WriteTIFFImage function in coders/tiff.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted file.
1Imagemagick
1Imagemagick
May 13, 2026
Mar 23, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before 6.9.5-6 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.
2Imagemagick
Opensuse
2Imagemagick
Leap
May 13, 2026
Mar 23, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted fil...Show more
Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.Show less
2Imagemagick
Opensuse
2Imagemagick
Leap
May 13, 2026
Mar 23, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE f...Show more
Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.Show less
1Imagemagick
1Imagemagick
May 13, 2026
Mar 23, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick before 6.9.4-4 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.
2Imagemagick
Opensuse Project
2Imagemagick
Leap
May 13, 2026
Mar 23, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.
1Imagemagick
1Imagemagick
May 13, 2026
Mar 23, 2017
N/A· v4
5.5 MEDIUM· v3
7.1 HIGH· v2
Memory leak in the NewXMLTree function in magick/xml-tree.c in ImageMagick before 6.9.4-7 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML file.
1Imagemagick
1Imagemagick
May 13, 2026
Mar 23, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Heap-based buffer overflow in the DrawImage function in magick/draw.c in ImageMagick before 6.9.5-5 allows remote attackers to cause a denial of service (application crash) via a crafted image file.
1Imagemagick
1Imagemagick
May 13, 2026
Mar 23, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Off-by-one error in ImageMagick before 6.6.0-4 allows remote attackers to cause a denial of service (application crash) via a crafted 8BIM profile.
1Imagemagick
1Imagemagick
May 13, 2026
Mar 22, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file.
1Imagemagick
1Imagemagick
May 13, 2026
Mar 22, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access).
1Imagemagick
1Imagemagick
May 13, 2026
Mar 22, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
magick/cache.c in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (crash).
1Imagemagick
1Imagemagick
May 13, 2026
Mar 22, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service via a crafted xpm file.