CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 1CVE-2022-0284 – Gentoo Linux Security Advisory 202405-02
https://notcve.org/view.php?id=CVE-2022-0284
21 Feb 2022 — A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'. This vulnerability is triggered when an attacker passes a specially crafted Tagged Image File Format (TIFF) image to convert it into a PICON file format. This issue can potentially lead to a denial of service and information disclosure. Se ha encontrado un fallo de lectura excesiva del búfer en la región heap de la memoria en la función GetPixelAlpha() del archivo "pixel-accessor.h" de ImageMagick. ... • https://access.redhat.com/security/cve/CVE-2022-0284 • CWE-125: Out-of-bounds Read •
CVSS: 4.4EPSS: 0%CPEs: 2EXPL: 0CVE-2021-39212 – Issue when Configuring the ImageMagick Security Policy
https://notcve.org/view.php?id=CVE-2021-39212
13 Sep 2021 — ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded by a `module` policy in `policy.xml`. ex.
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-20310
https://notcve.org/view.php?id=CVE-2021-20310
11 May 2021 — A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability. Se encontró un fallo en ImageMagick en versiones anteriores a 7.0.11, donde una división por cero en la función ConvertXYZToJzazbz() del archivo MagickCore/colorspace.c p... • https://bugzilla.redhat.com/show_bug.cgi?id=1946728 • CWE-369: Divide By Zero •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2021-20309 – Ubuntu Security Notice USN-5736-1
https://notcve.org/view.php?id=CVE-2021-20309
23 Apr 2021 — A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage() of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image file submitted to an application using ImageMagick. The highest threat from this vulnerability is to system availability. Se encontró un fallo en ImageMagick en versiones anteriores a 7.0.11 y versiones anteriores a 6.9.12, donde una división por cero en la función WaveImage() del archivo MagickCore/visual-effec... • https://bugzilla.redhat.com/show_bug.cgi?id=1946722 • CWE-369: Divide By Zero •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-20311 – openSUSE Security Advisory - openSUSE-SU-2021:0606-1
https://notcve.org/view.php?id=CVE-2021-20311
23 Apr 2021 — A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage() in the MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability. Se encontró un fallo en ImageMagick en versiones anteriores a 7.0.11, donde una división por cero en la función sRGBTransformImage() en el archivo MagickCore/colorspac... • https://bugzilla.redhat.com/show_bug.cgi?id=1946739 • CWE-369: Divide By Zero •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2021-20312 – Ubuntu Security Notice USN-5736-1
https://notcve.org/view.php?id=CVE-2021-20312
23 Apr 2021 — A flaw was found in ImageMagick in versions 7.0.11, where an integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability. Se encontró un fallo en ImageMagick en versiones 7.0.11, donde un desbordamiento de enteros en la función WriteTHUMBNAILImage del archivo coders/humbnail.c puede desencadenar un c... • https://bugzilla.redhat.com/show_bug.cgi?id=1946742 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-20313 – Ubuntu Security Notice USN-5736-1
https://notcve.org/view.php?id=CVE-2021-20313
23 Apr 2021 — A flaw was found in ImageMagick in versions before 7.0.11. A potential cipher leak when the calculate signatures in TransformSignature is possible. The highest threat from this vulnerability is to data confidentiality. Se encontró un fallo en ImageMagick en versiones anteriores a 7.0.11. Una potencial pérdida de cifrado cuando es posible calcular firmas en la función TransformSignature. • https://bugzilla.redhat.com/show_bug.cgi?id=1947019 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 1CVE-2020-19667 – openSUSE Security Advisory - openSUSE-SU-2021:0148-1
https://notcve.org/view.php?id=CVE-2020-19667
20 Nov 2020 — Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7. Un desbordamiento de búfer en la región stack de la memoria y un salto incondicional en la función ReadXPMImage en el archivo coders/xpm.c en ImageMagick versión 7.0.10-7 An update that fixes 35 vulnerabilities is now available. This update for ImageMagick fixes the following issues. • https://github.com/ImageMagick/ImageMagick/issues/1895 • CWE-787: Out-of-bounds Write •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0CVE-2020-27560 – Ubuntu Security Notice USN-4670-1
https://notcve.org/view.php?id=CVE-2020-27560
22 Oct 2020 — ImageMagick 7.0.10-34 allows Division by Zero in OptimizeLayerFrames in MagickCore/layer.c, which may cause a denial of service. ImageMagick versión 7.0.10-34, permite una División por Cero en la función OptimizeLayerFrames en el archivo MagickCore/layer.c, lo que puede causar una denegación de servicio It was discovered that ImageMagick incorrectly handled certain specially crafted image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker ... • http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00037.html • CWE-369: Divide By Zero •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2020-13902
https://notcve.org/view.php?id=CVE-2020-13902
07 Jun 2020 — ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding. ImageMagick versiones 7.0.9-27 hasta 7.0.10-17, presenta una lectura excesiva del búfer en la región heap de la memoria en la función BlobToStringInfo en el archivo MagickCore/string.c durante una decodificación de una imagen TIFF • https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20920 • CWE-125: Out-of-bounds Read •