CVE-2019-16713
ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published Updated
PatchFirst · Latest vulnerabilities
imagemagick vulnerabilities · Page 4
Vulnerabilities published for imagemagick in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 85
CVE-2019-15139
The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-15140
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-14981
In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13454
ImageMagick 7.0.1-0 to 7.0.8-54 Q16 allows Division by Zero in RemoveDuplicateLayers in MagickCore/layer.c.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13391
In ImageMagick 7.0.8-50 Q16, ComplexImages in MagickCore/fourier.c has a heap-based buffer over-read because of incorrect calls to GetCacheViewVirtualPixels.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13311
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of a wand/mogrify.c error.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13310
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13309
ImageMagick 7.0.8-50 Q16 has memory leaks at AcquireMagickMemory because of mishandling the NoSuchImage error in CLIListOperatorImages in MagickWand/operation.c.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13307
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13306
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13305
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13304
ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13301
ImageMagick 7.0.8-50 Q16 has memory leaks in AcquireMagickMemory because of an AnnotateImage error.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13300
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13297
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13295
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13137
ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadPSImage in coders/ps.c.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-13135
ImageMagick before 7.0.8-50 has a "use of uninitialized value" vulnerability in the function ReadCUTImage in coders/cut.c.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published UpdatedCVE-2019-12979
ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c.
- Update to 8:6.9.10.23+dfsg-2.1ubuntu9
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.