p PatchFirst

PatchFirst · Latest vulnerabilities

imagemagick vulnerabilities

Vulnerabilities published for imagemagick in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 341

  1. CVE-2019-15139

    Medium · CVSS 6.5EPSS 3.5%Fix available

    CVE-2019-15139

    The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472.

    • Update to 8:6.8.9.9-7ubuntu5.15
    Published Updated
  2. CVE-2019-15140

    High · CVSS 8.8EPSS 4.1%Fix available

    CVE-2019-15140

    coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c.

    • Update to 8:6.8.9.9-7ubuntu5.15
    Published Updated
  3. CVE-2019-15141

    Medium · CVSS 6.5EPSS 2.18%Fix available

    CVE-2019-15141

    WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and TIFFWriteDirectoryTagColormap in tif_dirwrite.c of LibTIFF. NOTE: this occurs because of an incomplete fix for CVE-2019-11597.

    • Update to 8:6.8.9.9-7ubuntu5.14
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →