ImageMagick 6.9

ImageMagick: Incorrect function call in attempting to locate the next token in DrawImage() function

ImageMagick: ipl file missing malloc check

ImageMagick: Off-by-one error in wpg.c

ImageMagick: Out-of-bounds memory read in VerticalFilter()

ImageMagick,GraphicsMagick: Gnuplot delegate vulnerability allowing command injection

ImageMagick: Lack of null pointer check in ReadDCMImage()

ImageMagick: Possible out-of-bounds write in ReadDCMImage()

ImageMagick: Possible integer overflow when computing pixel scaling table in ReadDCMImage

ImageMagick: Use-after-free in Magick::Image::read

ImageMagick: Out of bounds read in ReadOneMNGImage function in coders/png.c

ImageMagick: heap-based buffer over-read in WritePNGImage in coders/png.c

ImageMagick: integer overflows in MNG magnification

ImageMagick: Mishandled relationship between the BezierQuantum value and certain strokes data in TraceStrokePolygon() function

ImageMagick: Mishandled calculation of certain vertices integer data in DrawDashPolygon() function

ImageMagick: Memory allocation failure in AcquireMagickMemory (incomplete fix for CVE-2016-8862)

ImageMagick: Out-of-bounds read in CopyMagickMemory

ImageMagick: Memory allocation failure in AcquireMagickMemory

ImageMagick: Memory allocation failure in AcquireQuantumPixels

ImageMagick: Memory leak in the ReadMATImage function in coders/mat.c.

ImageMagick: coders/mpc.c don't validade blob sizes of mpc images received from stdin

ImageMagick: Too short JPEG data causes denial of service in coders/jpeg.c

ImageMagick: a "use of uninitialized value" vulnerability in the function ReadCUTImage leading to a crash and DoS

ImageMagick: Use after free in ReadICCProfile function in coders/jpeg.c

ImageMagick: heap-based buffer overflow in ReadPSInfo in coders/ps.c

ImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy

ImageMagick: Insufficient shell characters filtering

ImageMagick has an integer overflow in DIB coder can result in out of bounds read or write

Heap buffer overflow with attacker-controlled data in XBM parser

ImageMagick: Heap overflow and random invalid memory writes in WPg parser

ImageMagick: Buffer overflow in CALS coder

ImageMagick: Buffer overflow in SIXEL coder

ImageMagick: Buffer overflow when reading corrupt RLE files

ImageMagick: Buffer overflow in MAP coder

ImageMagick: Out-of-bounds write in exif (jpeg) reader

ImageMagick: Out of bounds read in viff file handling

ImageMagick: Use after free when using identify or convert

ImageMagick: Double-free memory corruption in profile.c

ImageMagick: Buffer overflow in tiff.c

ImageMagick: Buffer overflow in PDB coder

ImageMagick: Buffer overflow in tiff.c

ImageMagick: TIFF file buffer overflow

ImageMagick: Heap overflow when reading corrupt RLE files

ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c

ImageMagick: Shell injection via PDF password could result in arbitrary code execution

ImageMagick: load of misaligned address at MagickCore/property.c

ImageMagick: outside the range of representable values of type 'unsigned long' at coders/pcl.c

ImageMagick: outside the range of representable values of type 'unsigned char' at coders/psd.c

ImageMagick: Out-of-bounds write flaw in psd file handling

ImageMagick has a stack buffer overflow in MagnifyImage

ImageMagick is vulnerable to Stack Overflow in DestroyXMLTree()

ImageMagick has a Heap Buffer Overflow via MVG decoder

ImageMagick has an uninitialized pointer dereference in JBIG decoder

ImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder

Memory allocation with excessive without limits in the internal SVG decoder

ImageMagick: Infinite loop vulnerability when parsing a PCD file

ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression

ImageMagick (WriteBMPImage): 32-bit integer overflow when writing BMP scanline stride → heap buffer overflow

ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution

ImageMagick: Integer overflow within BMP encoder/writer

ImageMagick: Memory leak in caption and label handling

ImageMagick: Memory leak in isOptionMember function

ImageMagick: Arbitrary module loading due to not escaping relative path

ImageMagick: use of uninitialized memory in RLE decoder

ImageMagick: Integer and buffer overflow in coders/icon.c

ImageMagick: Information leak in MagickCore/property.c

ImageMagick: Buffer overflow due to too many exceptions in memory.c

ImageMagick: potential DOS by not releasing memory

ImageMagick: Initialized data use in ReadMATImage function in coders/mat.c

ImageMagick: Memory leak in the WriteDIBImage function in coders/dib.c

ImageMagick: Memory leak in the WritePSDChannel function in coders/psd.c

ImageMagick: Memory leak in the ReadSIXELImage function in coders/sixel.c

ImageMagick: Memory leak in the WritePDFImage function in coders/pdf.c

imagemagick: memory leak in function DecodeImage in coders/pcd.c

ImagemMagick: Division by zero in WaveImage() of MagickCore/visual-effects.c

ImageMagick: heap-based buffer overflow in ReadTIFFImage() in coders/tiff.c

ImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write.

ImageMagick has Stack Buffer Overflow in image.c

ImageMagick affected by stack corruption through long morphology kernel names or arrays

ImageMagick: off-by-one read in formatIPTCfromBuffer function in coders/meta.c

ImageMagick: heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h

ImageMagick: heap-use-after-free in RelinquishDCMInfo of dcm.c

ImageMagick: memory leak in identify -help

ImageMagick has a stack write buffer overflow in MNG encoder

ImageMagick has a heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation

ImageMagick has a write heap-buffer-overflow in PCL encoder via undersized output buffer

ImageMagick has a possible stack buffer overflow in sixel encoder

ImageMagick has heap overflow in pcd decoder that leads to out of bounds read.

ImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

Imagemagick Has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer

ImageMagick has heap overflow in sun decoder on 32-bit systems that can result in out of bounds write

ImageMagick has a NULL pointer dereference in MSL parser via <comment> tag before image load

ImageMagick: out-of-bounds read in coders/psd.c

ImageMagick: DOS due to corrupted DDS files

ImageMagick: SIGABRT for corrupted PSD file

ImageMagick: Integer truncation vulnerability in coders/pict.c

ImageMagick: pbd file heap-based OOB write

ImageMagick: Write path does not check return of fputc in magick-cli.c

ImageMagick: Null pointer dereference in tiff.c

ImageMagick: Out-of-bounds read when processing crafted tiff file

ImageMagick: denial of service flaw in PDB file processing

ImageMagick: OOB read and possible crash when processing malformed SUN files

ImageMagick: Off-by-one error in cache.c

ImageMagick: denial of service flaw in VICAR file processing

ImageMagick: CPU usage DOS due to corrupted DDS files

ImageMagick: Write path does not check return of fputc in tiff.c

ImageMagick: OOB read and possible crash when handling malformed SUN files

ImageMagick: denial of service flaw in MIFF file processing

ImageMagick: Mogrify buffer over-read in profile.c

ImageMagick: Fix handling of corrupted psd file

ImageMagick: additional PNM sanity checks

ImageMagick: Out-of-bounds read vulnerability in SGI Coder

ImageMagick: writing to rgf format aborts

ImageMagick: Mermory leak in ProcessMSLScript coders/msl.c

ImageMagick: Heap-based buffer overflow in Magick_png_read_raw_profile

imagemagick: NULL pointer dereference in MagickCore component can lead to a denial of service

ImageMagick: Improper input validation in ReadJP2Image function in coders/jp2.c

ImageMagick: Memory leak in ReadDIBImage in dib.c

ImageMagick: NULL pointer dereference in ReadOneJNGImage function

ImageMagick: CPU exhaustion in ReadOneJNGImage

ImageMagick: CPU exhaustion in ReadOneMNGImage

ImageMagick: Memory exhaustion in ReadEPTImage in ept.c

ImageMagick: Denial of service in ReadOnePNGImage function in coders/png.c

ImageMagick: Endless loop in ReadTXTImage function in coders/txt.c

ImageMagick: Improper EOF handling in coders/rle.c can trigger crash (Incomplete fix for CVE-2017-9144)

ImageMagick: Missing NULL check in the ReadMATImage function

ImageMagick: Memory leaks in ReadMATImage function involving the quantum_info and clone_info data structures

ImageMagick: Assertion failure in the WriteBlob function

ImageMagick: Info leak from from uninitialized memory in ReadJPEGImage function

ImageMagick: NULL pointer dereference in IdentifyImage function in MagickCore/identify.c

ImageMagick: Improper size validation in ReadJPEGImage function in error/jpeg.c

ImageMagick: Memory leak in ReadOnePNGImage function in coders/png.c

ImageMagick: Memory leak in the ReadDPXImage function in coders/dpx.c

ImageMagick: Improper input validation in WriteTHUMBNAILImage function in coders/thumbnail.c

ImageMagick: Infinite loop in ReadOneDJVUImage function in coders/djvu.c

ImageMagick: Improper validation of short files in coders/png.c

ImageMagick: Null-Pointer dereference in WriteOnePNGImage function in coders/png.c

ImageMagick: Use-after-free vulnerability in the DestroyImage function

ImageMagick: Memory leak in ReadMATImage in mat.c

ImageMagick: Memory leak in ReadCINImage function in coders/cin.c

ImageMagick: Memory leak in coders/dcm.c:ReadDCMImage can allow for denial of service

ImageMagick: Memory leak in the formatIPTCfromBuffer function in coders/meta.c

ImageMagick: infinite loop in coders/bmp.c

ImageMagick: reachable assertion in ReadOneJNGImage in coders/png.c

ImageMagick: Information leak in ReadXBMImage in coders/xbm.c

ImageMagick: a memory leak vulnerability in the function ReadPSImage in coders/ps.c

ImageMagick: out-of-bounds access in function LocaleLowercase in MagickCore/locale.c leads to SIGSEGV

ImageMagick: use-after-free in magick/blob.c resulting in a denial of service

ImageMagick: division by zero in MeanShiftImage in MagickCore/feature.c

ImageMagick: rle file handling OOB read

ImageMagick: out-of-bounds read in coders/pict.c

ImageMagick: heap-buffer-overflow read in coders/hdr.c

ImageMagick: heap buffer overflow in psd file handling

ImageMagick: out of bound read for malformed psd file

ImageMagick: OOB read in coders/meta.c

ImageMagick: heap-buffer-overflow in coders/meta.c

ImageMagick: heap buffer overflow in psd file coder

ImageMagick: out-of-bounds write in ./MagickCore/pixel-accessor.h

ImageMagick: out-of-bounds read in MagickCore/memory.c

ImageMagick: out of bound access for viff file coder

ImageMagick: out of bound heap read in XCF file coder

ImageMagick: out of bound in quantum handling

ImageMagick: WPG file out-of-bounds write

ImageMagick: out-of-bounds read in coders/rle.c

ImageMagick: out of bounds read problem in coders/viff.c

ImageMagick: out-of-bounds read in coders/sun.c

ImageMagick: CbYCrY quantum heap-based OOB read/write

ImageMagick: out of bound access for corrupted psd file

ImageMagick: SEGV reported in corrupted profile handling

ImageMagick: OOB read for corrupted pdb file

ImageMagick has a Path Policy TOCTOU symlink race bypass

ImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent`

ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

ImageMagick's MSL: Stack overflow in ProcessMSLScript

ImageMagick Undefined Behavior (function-type-mismatch) in CloneSplayTree

ImageMagick: heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h

ImageMagick has a Heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds

ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access

ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems

ImageMagick has a heap buffer over-write on 32-bit systems in SFW decoder

ImageMagick has a Heap Overflow when writing extremely large image profile in the PNG encoder

ImageMagick vulnerable to Code injection via PostScript header in ps coders

ImageMagick: Heap out-of-bounds write in JP2 encoder

ImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values

ImageMagick has an Out-of-Bounds read via -sample operation

ImageMagick: Stack Overflow via Recursive FX Expression Parsing

ImageMagick has a heap Buffer Overflow in WaveletDenoiseImage

ImageMagick: Local file read

ImageMagick: Memory leak in XML file transversal

ImageMagick: Crash due to out of bounds error in SpliceImage

ImageMagick: Buffer overflow due to too many exceptions in viff.c

ImageMagick: Memory leak in psd file handling

ImageMagick: Heap buffer overflow in WaveletDenoiseImage()

ImageMagick: Prevent NULL pointer access in magick/constitute.c

ImageMagick: Out-of-bounds read in mat.c

ImageMagick: denial of service flaw in HDR file processing

ImageMagick: Write path does not check return of fwrite

ImageMagick: Out-of-bounds read in mat.c

ImageMagick: Invalid number of frames not checked in mat files

ImageMagick: Buffer overflow in draw.c

ImageMagick: Heap-buffer-overflow in PushQuantumPixel

ImageMagick: TIFF divide by zero

ImageMagick: Segmentation fault in MSL interpreter

ImageMagick: Division by zero in WriteJP2Image() in coders/jp2.c

ImageMagick: outside the range of representable values of type 'unsigned char' at coders/hdr.c

ImageMagick: division by zero at MagickCore/enhance.c

ImageMagick: memory leaks in AcquireMagickMemory function

ImageMagick: Division by zero in WriteAnimatedWEBPImage() in coders/webp.c

ImageMagick: heap-based buffer overflow in WritePALMImage in coders/palm.c

ImageMagick: heap-based buffer overflow in TIFFGetProfiles in coders/tiff.c

ImageMagick: division by zero at MagickCore/geometry.c

ImageMagick: processing crafted file leads to division by zero

ImageMagick: division by zero in MagickCore/colorspace-private.h

ImageMagick: Division by zero in ScaleResampleFilter in MagickCore/resample.c

ImageMagick: heap-based buffer overflow in WriteOnePNGImage in coders/png.c

ImageMagick: unsigned offset overflowed at MagickCore/string.c

ImageMagick: outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c and MagickCore/cache.c

imagemagick: remote DoS in MagicCore/draw.c via crafted SVG file

ImageMagick: heap-buffer-overflow in PushShortPixel of quantum-private.h

ImageMagick: heap buffer overflow while processing a malformed TIFF file

ImageMagick: integer overflow in ExportIndexQuantum() in MagickCore/quantum-export.c

ImageMagick: stack overflow in coders/tiff.c while parsing malicious tiff file

ImageMagick: heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c

Imagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h

ImageMagick: SSRF vulnerability

ImageMagick: File deletion

ImageMagick: Heap BufferOverflow write of single zero byte when parsing XML

ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash

ImageMagick has a Heap Use-After-Free in ImageMagick MSL decoder

ImageMagick: Invalid MSL <map> can result in a use after free

ImageMagick's MSL image stack index not refreshed, leading to leaked images.

ImageMagick has heap buffer over-read in MAP image decoder

ImageMagick has a heap buffer overflow in YUV 4:2:2 decoder

ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"

ImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory Corruption

ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash

ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image

ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths

ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

ImageMagick has memory leak in msl encoder

ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS

ImageMagick: Integer overflow in despeckle operation causes heap buffer overflow on 32-bit builds

ImageMagick has an Out-of-bounds Write via InterpretImageFilename

ImageMagick: Out of bounds read in multiple coders read raw pixel data

ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family

ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder

Issue when Configuring the ImageMagick Security Policy

ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction

ImageMagick has a heap use-after-free in the MSL encoder

ImageMagick has a heap Buffer Over-read in its DJVU image format handler

ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images

ImageMagick BlobStream Forward-Seek Under-Allocation

ImageMagick affected by divide-by-zero in ThumbnailImage via montage -geometry ":" leads to crash

ImageMagick has Memory Leak in magick stream

ImageMagick has Heap Buffer Overflow in InterpretImageFilename

ImageMagick: File moving

ImageMagick: division by zero at MagickCore/segment.c

ImageMagick: outside the range of representable values of type 'unsigned long' at coders/palm.c

ImageMagick: outside the range of representable values of type 'unsigned int' at coders/bmp.c

ImageMagick: outside the range of representable values of type 'float' at MagickCore/quantum.h

ImageMagick: outside the range of representable values of type int and signed integer overflow in MagickCore/histogram.c

ImageMagick: memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c

ImageMagick: integer overflow in MagickCore/quantum-export.c

ImageMagick: outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c

ImageMagick: outside the range of representable values of type 'unsigned long long' at MagickCore/quantum-private.h

ImageMagick: outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h

ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c

ImageMagick: division by zero at MagickCore/resize.c

ImageMagick: outside the range of representable values of type 'int' at MagickCore/quantize.c

ImageMagick: outside the range of representable values of type 'unsigned long long' at coders/txt.c

ImageMagick: outside the range of representable values of type 'long' and integer overflow at MagickCore/transform.c and MagickCore/image.c

ImageMagick: division by zero at MagickCore/gem-private.h

ImageMagick: integer overflow at MagickCore/statistic.c

ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c

ImageMagick: outside the range of representable values of type 'unsigned char' at coders/pdf.c

ImageMagick: Memory leak in Magick::Draw