ImageMagick vulnerabilities

The coders/psd.c file in ImageMagick contains a vulnerability that allows remote attackers to have unspecified impact via a crafted PSD file, leading to an out-of-bounds write.

A memory leak in ImageMagick before version 6.9.7-4 and 7.x before version 7.0.4-4 in coders/mpc.c allows remote attackers to cause a denial of service (memory consumption) via vectors involving a pixel cache.

A double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file.

Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of service via unspecified vectors.

Buffer overflow in coders/tiff.c in ImageMagick before version 6.9.4-1 allows remote attackers to cause application crash or unspecified other impact via a crafted TIFF file.

Buffer overflow in the WriteGROUP4Image function in coders/tiff.c in ImageMagick before version 6.9.5-8 allows remote attackers to cause application crashes or have other unspecified impacts via a crafted file.

Buffer overflow in the sixel_decode function in coders/sixel.c in ImageMagick before version 6.9.5-8 allows remote attackers to cause application crashes or have other unspecified impacts via a crafted file.

Buffer overflow in the WritePDBImage function in coders/pdb.c in ImageMagick before version 6.9.5-8 allows remote attackers to cause application crashes or other unspecified impacts via a crafted file.

Buffer overflow in the WriteMAPImage function in coders/map.c in ImageMagick before version 6.9.5-8 allows remote attackers to cause application crashes or other unspecified impacts via a crafted file.

Buffer overflow in the WriteProfile function in coders/jpeg.c in ImageMagick before version 6.9.5-6 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.

A use-after-free vulnerability in the ReadPWPImage function in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.

Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file.

Buffer overflow in the ReadRLEImage function in ImageMagick before version 6.9.4-4 allows remote attackers to cause application crashes or other unspecified impacts via a crafted RLE file.

Directory traversal vulnerability in magick/module.c in ImageMagick 6.9.4-7 allows remote attackers to load arbitrary modules via unspecified vectors.

The magick/colormap-private.h file in ImageMagick 6.8.9-9 contains a vulnerability that allows remote attackers to cause a denial of service through out-of-bounds access.

Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file.

Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file.

Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file.

Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file.

ImageMagick version 6.8.9.9 allows remote attackers to cause application crashes, leading to denial of service.

A logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).

The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).

A memory leak in ImageMagick can be exploited by remote attackers to cause a denial of service through excessive memory consumption.

A memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors.

The vulnerability in coders/tiff.c in ImageMagick allows remote attackers to cause application crashes through manipulation related to image identification.

Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service (application crash) via a crafted length value, which triggers a buffer overflow.

A memory leak in the IsOptionMember function in option.c in ImageMagick before version 6.9.2-2 allows attackers to trigger memory consumption.

An issue was discovered in ImageMagick 6.9.7 that could lead to a NULL pointer dereference when processing a specially crafted psd file, resulting in a DoS attack.

The ReadVIFFImage function in ImageMagick before version 7.0.1-0 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file.

In ImageMagick before version 6.9.4-5, a vulnerability allows remote attackers to cause application crashes by triggering too many exceptions, leading to a buffer overflow.

Buffer overflow in coders/tiff.c in ImageMagick before version 6.9.5-1 allows remote attackers to cause application crash or have other unspecified impact via a crafted file.

Buffer overflow in coders/tiff.c in ImageMagick before version 6.9.5-1 allows remote attackers to cause application crash or have other unspecified impact via a crafted file.

The AcquireQuantumPixels function in ImageMagick before version 7.0.3-1 allows remote attackers to have unspecified impact via a crafted image file, triggering a memory allocation failure.

The AcquireMagickMemory function in ImageMagick 7.0.3.3 before 7.0.3.8 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure.

The AcquireMagickMemory function in ImageMagick before version 7.0.3.3 allows remote attackers to have unspecified impact via a crafted image, triggering a memory allocation failure.

Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted height and width values, which triggers an out-of-bounds write.

An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagick's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular circumstances could be leveraged into remote code execution.

Buffer overflow in the Get8BIMProperty function in ImageMagick before version 6.9.5-4 and 7.x before version 7.0.2-6 allows remote attackers to cause a denial of service via a crafted image.

In ImageMagick before version 7.0.2-1, a vulnerability allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bounds read.

The WPG parser in ImageMagick before version 6.9.4-4 and 7.x before version 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via issues related to the SetImageExtent return-value check. This can lead to a heap-based buffer overflow in the SetPixelIndex function or an invalid write operation in the ScaleCharToQuantum or SetPixelIndex functions.

The TraceStrokePolygon function in ImageMagick before version 6.9.4-0 and 7.x before version 7.0.1-2 mishandles the relationship between the BezierQuantum value and certain strokes data. This may allow remote attackers to cause a denial of service (buffer overflow and application crash) or potentially have unspecified other impact via a crafted file.

The DrawDashPolygon function in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calculations of certain vertices integer data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.

A vulnerability was found in ImageMagick that leads to a remote code execution vulnerability in OpenBlob when the --enable-pipes option is configured.

ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp.

ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.

ImageMagick version 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c.

ImageMagick version 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.

In ImageMagick before version 6.9.9-0 and 7.x before version 7.0.6-1, there is a vulnerability in the ReadOneMNGImage function in coders/png.c that leads to an out-of-bounds read with the MNG CLIP chunk.

ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.

The coders/psd.c file in ImageMagick contains a vulnerability that allows remote attackers to leverage an improper cast, leading to a heap-based buffer overflow.