All packages
ImageMagick vulnerabilities
203 known CVE vulnerabilities in ImageMagick, translated and rated.
- CVE-2023-34474Medium
A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user into opening a specially crafted file, triggering an out-of-bounds read error, which may cause the application to crash.
- CVE-2023-34153High
A vulnerability was found in ImageMagick that allows shell command injection via video:vsync or video:pixel-format options during video encoding/decoding.
- CVE-2023-34151Medium
A vulnerability was found in ImageMagick, occurring due to undefined behaviors of casting double to size_t in svg, mvg and other coders. This is a recurring bug related to CVE-2022-32546.