Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

imagemagick imagemagick 7.0.8-43 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2019-19948
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer overflow in the function WriteSGIImage of coders/sgi.c.
Imagemagick Imagemagick 7.0.8-43Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.1Canonical Ubuntu Linux 20.04
9.8
CVSSv3
CVE-2018-16328
In ImageMagick prior to 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c.
Imagemagick Imagemagick
9.8
CVSSv3
CVE-2017-13139
In ImageMagick prior to 6.9.9-0 and 7.x prior to 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CLIP chunk.
Imagemagick Imagemagick 7.0.5-2Imagemagick Imagemagick 7.0.5-3Imagemagick Imagemagick 7.0.4-0Imagemagick Imagemagick 7.0.4-1Imagemagick Imagemagick 7.0.4-8Imagemagick Imagemagick 7.0.4-9Imagemagick Imagemagick 7.0.3-6Imagemagick Imagemagick 7.0.3-7Imagemagick Imagemagick 7.0.2-3Imagemagick Imagemagick 7.0.2-4Imagemagick Imagemagick 7.0.0-0Imagemagick Imagemagick 7.0.1-0Imagemagick Imagemagick 7.0.1-1Imagemagick Imagemagick 7.0.1-8Imagemagick Imagemagick 7.0.1-9Imagemagick Imagemagick 7.0.6-0Imagemagick Imagemagick 7.0.5-6Imagemagick Imagemagick 7.0.5-7Imagemagick Imagemagick 7.0.4-4Imagemagick Imagemagick 7.0.4-5Imagemagick Imagemagick 7.0.3-2Imagemagick Imagemagick 7.0.3-3
9.1
CVSSv3
CVE-2019-19949
In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WritePNGImage of coders/png.c, related to Magick_png_write_raw_profile and LocaleNCompare.
Imagemagick ImagemagickDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.1Canonical Ubuntu Linux 20.04
8.8
CVSSv3
CVE-2019-17540
ImageMagick prior to 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.
Imagemagick ImagemagickDebian Debian Linux 9.0Debian Debian Linux 10.0
8.8
CVSSv3
CVE-2019-17541
ImageMagick prior to 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c.
Imagemagick Imagemagick
8.8
CVSSv3
CVE-2019-15140
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote malicious users to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c.
Imagemagick Imagemagick 7.0.8-43
8.8
CVSSv3
CVE-2019-13295
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled.
Imagemagick Imagemagick 7.0.8-50Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.0Opensuse Leap 15.1Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 19.10
8.8
CVSSv3
CVE-2019-13297
ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled.
Imagemagick Imagemagick 7.0.8-50Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 19.10Opensuse Leap 15.0Opensuse Leap 15.1
8.8
CVSSv3
CVE-2019-13300
ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns.
Imagemagick Imagemagick 7.0.8-50Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 16.04Opensuse Leap 15.0Opensuse Leap 15.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook