Imagemagick: heap use-after-free in coders/bmp.c
A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.
- Update to 8:6.8.9.9-7ubuntu5.16+esm10
Published Updated
PatchFirst · Latest vulnerabilities
imagemagick vulnerabilities · Page 12
Vulnerabilities published for imagemagick in the last 30 days: 70. Listed in the KEV catalogue: 0.
Vulnerabilities: 314
CVE-2022-48541
A memory leak in ImageMagick 7.0.10-45 and 6.9.11-22 allows remote attackers to perform a denial of service via the "identify -help" command.
- Update to 8:6.8.9.9-7ubuntu5.16+esm9
Published UpdatedCVE-2021-40211
An issue was discovered with ImageMagick 7.1.0-4 via Division by zero in function ReadEnhMetaFile of coders/emf.c.
- Update to 8:6.8.9.9-7ubuntu5.16+esm4
Published UpdatedCVE-2023-34151
A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546).
- Update to 8:6.8.9.9-7ubuntu5.16+esm8
Published UpdatedCVE-2022-44268
ImageMagick 7.1.0-49 is vulnerable to Information Disclosure. When it parses a PNG image (e.g., for resize), the resulting image could have embedded the content of an arbitrary. file (if the magick binary has permissions to read it).
- Update to 8:6.8.9.9-7ubuntu5.16+esm7
Published UpdatedCVE-2022-44267
ImageMagick 7.1.0-49 is vulnerable to Denial of Service. When it parses a PNG image (e.g., for resize), the convert process could be left waiting for stdin input.
- Update to 8:6.8.9.9-7ubuntu5.16+esm7
Published UpdatedCVE-2021-20224
An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GetPixelIndex() could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash.
- Update to 8:6.8.9.9-7ubuntu5.16+esm5
Published UpdatedCVE-2022-32547
In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by ImageMagick, this causes a negative impact to application availability or other problems related to undefined behavior.
- Update to 8:6.8.9.9-7ubuntu5.16+esm4
Published UpdatedCVE-2022-32546
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior.
- Update to 8:6.8.9.9-7ubuntu5.16+esm4
Published UpdatedCVE-2022-32545
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior.
- Update to 8:6.8.9.9-7ubuntu5.16+esm4
Published UpdatedCVE-2022-28463
ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
- Update to 8:6.8.9.9-7ubuntu5.16+esm3
Published UpdatedCVE-2020-27769
In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c.
- Update to 8:6.8.9.9-7ubuntu5.16+esm11
Published UpdatedCVE-2021-20313
A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality.
- Update to 8:6.8.9.9-7ubuntu5.16+esm1
Published UpdatedCVE-2021-20312
A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.
- Update to 8:6.8.9.9-7ubuntu5.16+esm1
Published UpdatedCVE-2021-20309
A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an application using ImageMagick. The highest threat from this vulnerability is to system availability.
- Update to 8:6.8.9.9-7ubuntu5.16+esm1
Published UpdatedCVE-2021-20246
A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
- Update to 8:6.8.9.9-7ubuntu5.16+esm1
Published UpdatedCVE-2021-20244
A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
- Update to 8:6.8.9.9-7ubuntu5.16+esm1
Published UpdatedCVE-2021-20243
A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
- Update to 8:6.8.9.9-7ubuntu5.16+esm2
Published UpdatedCVE-2021-20241
A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.
- Update to 8:6.8.9.9-7ubuntu5.16+esm2
Published UpdatedCVE-2020-27768
In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0.
- Update to 8:6.8.9.9-7ubuntu5.16+esm11
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.