Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.
Open advisories
165 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.
A heap buffer overflow occurs in the MVG decoder that could result in an out of bounds write when processing a crafted image.
Recommended action: Upgrade to 14.12.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Magick frees the memory of the XML tree via the DestroyXMLTree function; however, this process is executed recursively with no depth limit imposed. When magick processes an XML file with deeply nested structures, it will exhaust the stack memory, resulting in a Denial of Service (DoS) attack.
Recommended action: Upgrade to 14.12.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
When Magick parses an XML file it is possible that a single zero byte is written out of the bounds.
Recommended action: Upgrade to 14.12.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
An integer overflow in the despeckle operation causes a heap buffer overflow on 32-bit builds that will result in an out of bounds write.
Recommended action: Upgrade to 14.12.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the viff encoder contains an integer truncation/wraparound issue on 32-bit builds that could trigger an out of bounds heap write, potentially causing a crash. This issue has been fixed in versions 6.9.13-44 and 7.1.2-19.
Recommended action: Upgrade to 14.12.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
ImageMagick contains a memory leak in the META reader when processing the APP1JPEG input path.
Recommended action: Upgrade to 14.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
The ASHLAR coder leaks a temporary image when an action fails and that could result to an out of memory.
Recommended action: Upgrade to 14.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Due to an incorrect return value on certain platforms a pointer is incremented past the end of a buffer that is on the stack and that could result in an out of bounds write.
Recommended action: Upgrade to 14.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
An out-of-bounds write of a zero byte exists in the X11 display interaction path that could lead to a crash.
Recommended action: Upgrade to 14.11.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
The NewXMLTree method contains a bug that could result in a crash due to an out of write bounds of a single zero byte.
Recommended action: Upgrade to 14.11.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Specially crafted SVG file make segmentation fault and generate trash files in "/tmp", possible to leverage DoS. Operating system, version and so on Linux, Debian (Buster) LTS core 5.10 / Parrot OS 5.1 (Electro Ara) Tested ImageMagick version 6.9.11-60, 7.1.0-62 Details A specially created SVG file that loads by itself and make segmentation fault. Remote attackers can take advantage of this vulnerability to cause a denial of service of the generated SVG file. It seems that this error affects a lot of websites and causes a generating trash files in when uploading this PC file to the server. I think it's better to check the file descriptor coming from itself before executing . PoC 1. Generate SVG file: 2. Run some commands for verification: Impact Possible DOS, because when ImageMagick crashes it generates a lot of trash files. This trash file can be large, if SVG file contains many render action. Additional impact In DOS attack if remount attacker uploads an SVG file of size…
Recommended action: Upgrade to 13.0.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
A 32-bit unsigned integer overflow in the XWD (X Windows) encoder can cause an undersized heap buffer allocation. When writing a extremely large image an out of bounds heap write can occur.
Recommended action: Upgrade to 14.10.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
A crafted image could cause an out of bounds heap write inside the WaveletDenoiseImage method. When processing a crafted image with the -wavelet-denoise operation an out of bounds write can occur.
Recommended action: Upgrade to 14.10.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
BilateralBlurImage contains a heap buffer over-read caused by an incorrect conversion. When processing a crafted image with the -bilateral-blur operation an out of bounds read can occur.
Recommended action: Upgrade to 14.10.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
A heap-based buffer overflow in the UHDR encoder can happen due to truncation of a value and it would allow an out of bounds write.
Recommended action: Upgrade to 14.10.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
MagnifyImage uses a fixed-size stack buffer. When using a specific image it is possible to overflow this buffer and corrupt the stack.
Recommended action: Upgrade to 14.10.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
An integer overflow in DIB coder can result in out of bounds read or write
Recommended action: Upgrade to 14.10.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
An uninitialized pointer dereference vulnerability exists in the JBIG decoder due to a missing check.
Recommended action: Upgrade to 14.10.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
A stack buffer overflow vulnerability exists in the MNG encoder. There is a bounds checks missing that could corrupting the stack with attacker-controlled data.
Recommended action: Upgrade to 14.10.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
A heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write capability has been removed.
Recommended action: Upgrade to 14.10.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
A heap use-after-free vulnerability in ImageMagick's MSL decoder allows an attacker to trigger access to freed memory by crafting an MSL file.
Recommended action: Upgrade to 14.10.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
A heap-buffer-overflow vulnerability exists in the PCL encode due to an undersized output buffer allocation.
Recommended action: Upgrade to 14.10.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
A stack buffer overflow exists in ImageMagick's morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-size stack buffers via memcpy without bounds checking, resulting in stack corruption.
Recommended action: Upgrade to 14.10.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
An integer overflow vulnerability exists in the SIXEL decoer. The vulnerability allows an attacker to perform an out of bounds via a specially crafted mage.
Recommended action: Upgrade to 14.10.4 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
The pcd coder lacks proper boundary checking when processing Huffman-coded data. The decoder contains an function that has an incorrect initialization that could cause an out of bounds read.
Recommended action: Upgrade to 14.10.3 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.