Writeup Exploits
62,792 exploits tracked across all sources.
ImageMagick < 6.9.11-57 - Integer Overflow in ExportIndexQuantum
An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GetPixelIndex() could result in values outside the range of representable for the 'unsigned char'. When ImageMagick processes a crafted pdf file, this could lead to an undefined behaviour or a crash.
CVSS 5.5
ImageMagick <7.0.10-40 - Command Injection
ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.
CVSS 7.8
ImageMagick < 7.0.8-56 - Use-After-Free in SetImageAlphaChannel
A call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap-buffer-overflow READ when GetPixelRed() or GetPixelBlue() was called. This could occur if an attacker is able to submit a malicious image file to be processed by ImageMagick and could lead to denial of service. It likely would not lead to anything further because the memory is used as pixel data and not e.g. a function pointer. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS 5.5
ImageMagick < 7.0.8-56 - Use-After-Free in SetImageAlphaChannel
A call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap-buffer-overflow READ when GetPixelRed() or GetPixelBlue() was called. This could occur if an attacker is able to submit a malicious image file to be processed by ImageMagick and could lead to denial of service. It likely would not lead to anything further because the memory is used as pixel data and not e.g. a function pointer. This flaw affects ImageMagick versions prior to 7.0.9-0.
CVSS 5.5
ImageMagick - Stack-based Buffer Overflow in ReadXPMImage
Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.
CVSS 7.8
ImageMagick 7.0.9 - Out-of-bounds Read in ReadHEICImageByID
In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c. It can be triggered via an image with a width or height value that exceeds the actual size of the image.
CVSS 5.5
ImageMagick <7.0.8-35 - Buffer Overflow
In ImageMagick 7.0.8-35 Q16, there is a stack-based buffer overflow in the function PopHexPixel of coders/ps.c, which allows an attacker to cause a denial of service or code execution via a crafted image file.
CVSS 8.8
ImageMagick <7.0.8-25 - Memory Corruption
In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c.
CVSS 7.5
ImageMagick <7.0.8-25 - Memory Corruption
In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c.
CVSS 7.5
ImageMagick <7.0.8-25 - Memory Corruption
In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c.
CVSS 7.5
ImageMagick <7.0.8-25 - Memory Corruption
In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c.
CVSS 7.5
ImageMagick <7.0.8-25 - Memory Corruption
In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.
CVSS 7.5
ImageMagick 7.0.8-61-7.0.9-7 - Use-After-Free in MngInfoDiscardObject
In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage.
CVSS 9.8
ImageMagick 7.0.8-43 - Heap-Based Buffer Over-Read in WritePNGImage
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_profile and LocaleNCompare.
CVSS 9.1
ImageMagick 7.0.8-43 - Heap-Based Buffer Overflow in WriteSGIImage
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
CVSS 9.8
ImageMagick < 7.0.8-62 - Use-After-Free in TraceBezier
In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a use-after-free.
CVSS 8.8
ImageMagick < 6.9.10-55 - Use-After-Free in DestroyStringInfo
ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.
CVSS 8.8
ImageMagick < 6.9.10-55 - Use-After-Free in DestroyStringInfo
ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.
CVSS 8.8
ImageMagick < 7.0.8-54 - Heap-Based Buffer Overflow in ReadPSInfo
ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.
CVSS 8.8
ImageMagick < 7.0.8-54 - Heap-Based Buffer Overflow in ReadPSInfo
ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.
CVSS 8.8
ImageMagick 7.0.8-43 - Memory Corruption
ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.
CVSS 6.5
ImageMagick 7.0.8-43 - Memory Corruption
ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.
CVSS 6.5
ImageMagick 7.0.8-40 - Memory Corruption
ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.
CVSS 6.5
ImageMagick 7.0.8-35 - Memory Corruption
ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.
CVSS 6.5
ImageMagick 7.0.8-35 - Memory Corruption
ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.
CVSS 6.5
By Source