CVE-2022-28463 vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.

Imagemagick Imagemagick 7.1.0-27 Debian Debian Linux 9.0

5.5

CVSSv3

A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to ImageMagick for conversion, potentially leading to a denial of service.

Imagemagick Imagemagick

5.5

CVSSv3

A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

Imagemagick Imagemagick Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 8.0 Fedoraproject Fedora 33 Debian Debian Linux 9.0

7.5

CVSSv3

A flaw was found in ImageMagick in versions prior to 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality.

Imagemagick Imagemagick Debian Debian Linux 9.0

7.1

CVSSv3

A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm.c file. This vulnerability is triggered when an attacker passes a specially crafted DICOM image file to ImageMagick for conversion, potentially leading to information disclosure and a d...

Imagemagick Imagemagick

7.5

CVSSv3

A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threa...

Imagemagick Imagemagick Debian Debian Linux 9.0

5.5

CVSSv3

A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

Imagemagick Imagemagick Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 8.0 Fedoraproject Fedora 33 Debian Debian Linux 9.0

5.5

CVSSv3

A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

Imagemagick Imagemagick Debian Debian Linux 9.0

5.5

CVSSv3

A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an malicious user to crash the system.

Imagemagick Imagemagick

5.5

CVSSv3

A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability.

Imagemagick Imagemagick Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux 8.0 Fedoraproject Fedora 33 Debian Debian Linux 9.0

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook