ImageMagick vulnerabilities

Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy.

The coders/ipl.c file in ImageMagick contains a vulnerability that allows remote attackers to achieve unspecified impact due to a missing malloc check.

The jng decoder in ImageMagick version 6.8.9.9 allows remote attackers to have an unspecified impact on the system.

Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.

The DecodePSDPixels function in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.

The ReadPSDLayers function in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to 'throwing of exceptions.'

The distribute-cache.c file in ImageMagick has an issue with re-using objects after they have been destroyed, which may allow remote attackers to cause unspecified impact.

Buffer overflow in enhance.c in ImageMagick before version 7.0.2-7 allows remote attackers to have unspecified impact via vectors related to pixel cache morphology.

Integer overflow in profile.c in ImageMagick before version 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code via manipulation of the offset variable.

The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table.

The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read.

The DrawImage function in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 contains an incorrect function call, which may lead to buffer overflow and application crash. Remote attackers can exploit this vulnerability by sending a crafted file.

A vulnerability in ImageMagick (versions prior to 7.1.2-27) in the BGR decoder. Lack of end-of-file checking in every location can lead to a heap buffer over-read.

A vulnerability in ImageMagick (versions prior to 6.9.13-52 and 7.1.2-27) when processing a very large JNX file on 32-bit platforms. An integer overflow can occur, leading to a heap buffer over-write.

In ImageMagick prior to version 7.1.2-27, a heap buffer over-write vulnerability exists in the fx operation. An attacker can trigger it with a crafted argument, causing memory corruption.

In ImageMagick prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer over-write vulnerability exists during morphology operations with a user-supplied kernel. An invalid kernel can cause memory corruption.

ImageMagick before 7.1.2-27 has a memory leak vulnerability in the magick CLI when invalid options are provided. Attackers can repeatedly supply malformed arguments to cause memory exhaustion.

ImageMagick before versions 7.1.2-26 and 6.9.13-51 contains a memory leak in the TIFF encoder when an invalid tiff:tile-geometry is specified. Supplying malformed tile geometry parameters causes allocated memory not to be released, which can lead to increased memory consumption.

ImageMagick before versions 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs when a memory allocation fails. Processing a crafted ICON file that triggers an allocation failure leaks memory, which may lead to a denial of service.

ImageMagick before versions 7.1.2-26 and 6.9.13-51 contains a memory leak in the MIFF encoder that occurs when a memory allocation fails during MIFF image processing, potentially leading to denial of service (DoS).

A vulnerability in ImageMagick before versions 7.1.2-26 and 6.9.13-51 causes a memory leak in the YUV decoder when blob opening fails. Repeated triggering can lead to resource exhaustion (denial of service).

ImageMagick before version 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation fails. Attackers can trigger allocation failures during TIFF image processing to cause memory exhaustion and denial of service.

A vulnerability in ImageMagick before version 7.1.2-26 causes a memory leak in the JNG encoder when a blob cannot be opened. Attackers can trigger resource exhaustion by providing malformed JNG files that fail blob operations.

ImageMagick before versions 7.1.2-26 and 6.9.13-51 contains a memory leak in the Hough line detection operation. When a specific operation fails, a small memory leak occurs.

ImageMagick before versions 7.1.2-26 and 6.9.13-51 contains a memory leak in color transformation to the log colorspace. When the operation fails, a small amount of memory is not released.

In ImageMagick before version 7.1.2-26 (and 6.x before 6.9.13-51) there is a memory leak in the TIFF encoder that occurs when a temporary file cannot be created, resulting in a small memory leak.

In ImageMagick before versions 7.1.2-26 and 6.9.13-51, there is an information disclosure vulnerability. When a profile is displayed with the identify command and the profile value is not printable, a single byte past the profile boundary can be read. This behavior occurs when debug output is enabled.

ImageMagick before versions 7.1.2-26 and 6.9.13-51 contains a use-after-free vulnerability that occurs when freetype initialization fails. The method does not exit and continues to use already freed memory, which can lead to a denial of service.

A vulnerability in ImageMagick before versions 7.1.2-26 and 6.9.13-51 allows bypassing security policy in the -script operation. Missing security policy checks enable reading files from paths that are otherwise disallowed.

In ImageMagick before versions 7.1.2-26 and 6.9.13-51, a heap-based buffer over-write vulnerability exists when running an X11 import with a crafted window title, which can result in heap memory corruption and denial of service.

A memory leak vulnerability in ImageMagick through version 7.1.2-18 exists in the ASHLAR coder when an action fails. Attackers can trigger failed actions to exhaust memory resources and cause denial of service.

ImageMagick before version 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service.

In ImageMagick before version 7.1.2-26, there is a use-after-free vulnerability in the FormatMagickCaption method when memory allocation fails. Attackers can trigger memory allocation failures, causing a dangling pointer to reference freed memory, potentially leading to denial of service or code execution.

A vulnerability in ImageMagick before version 7.1.2-26 allows policy bypass in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by exploiting the APNG encoding process.

In ImageMagick before version 7.1.2-26, there is a heap use-after-free vulnerability caused by a missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.

ImageMagick before versions 7.1.2-26 and 6.9.13-51 lacks a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supply a crafted image that causes ImageMagick to allocate more memory than permitted by the configured policy, resulting in a denial of service.

A heap buffer overflow vulnerability in ImageMagick before 7.1.2-19 in the magnify operation allows out-of-bounds memory read. An unrecognized magnify:method value triggers the issue, potentially exposing sensitive information or causing denial of service.

ImageMagick before version 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerability by processing malicious PDB files to cause crashes or write a single zero byte to freed memory.

ImageMagick before version 7.1.2-18 contains a memory leak vulnerability in the META reader when processing APP1JPEG input paths. Attackers can trigger this memory leak by providing specially crafted APP1JPEG image files, causing denial of service through resource exhaustion.

A heap buffer overflow vulnerability in ImageMagick before 7.1.2-19 exists in the FTXT encoder due to missing boundary checks when parsing ftxt:format. Remote attackers can trigger an out-of-bounds read by crafting malicious FTXT image files, leading to denial of service or information disclosure.

In ImageMagick before version 7.1.2-15, there is a heap-buffer-overflow read vulnerability in the GetPixelIndex function. The issue arises because OpenPixelCache updates image channel metadata before allocating pixel cache memory. Attackers can trigger memory and disk allocation failures, causing a heap-buffer-overflow read that affects any writer calling GetPixelIndex.

In ImageMagick prior to version 7.1.2-26he, the `-concatenate` operation is missing policy checks, potentially allowing reading and writing to paths disallowed by the security policy. Fixed in version 7.1.2-26.

In ImageMagick prior to version 7.1.2-26, a heap buffer over-write vulnerability exists in the JP2 encoder due to incorrect argument handling. The issue has been fixed in version 7.1.2-26.

In ImageMagick prior to versions 6.9.13-51 and 7.1.2-26, providing invalid arguments to the connected-components option causes an infinite loop. This issue has been fixed in the mentioned versions.

In ImageMagick prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder leads to a stack overflow when processing a crafted image.

In ImageMagick prior to versions 6.9.13-51 and 7.1.2-26, a heap buffer overflow occurs in the MVG decoder that could result in an out-of-bounds write when processing a crafted image.

In ImageMagick prior to versions 6.9.13-51 and 7.1.2-26, a use-after-free vulnerability occurs when identifying an image with a crafted 8BIM profile containing a specific format string. The issue is fixed in the mentioned versions.

In ImageMagick prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a heap information disclosure vulnerability because part of the pixels are left unchanged.

In ImageMagick prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is processed, potentially causing a crash.

A vulnerability in ImageMagick before version 7.1.2-24 allows attackers to bypass security policies and create or truncate files that should be blocked. The flaw is due to incorrect policy path validation, enabling file writes outside allowed boundaries.