Debian Imagemagick vulnerabilities

CVE-2014-9804 [HIGH] CVE-2014-9804: imagemagick - vision.c in ImageMagick allows remote attackers to cause a denial of service (in... vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via vectors related to "too many object." Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2019-7175 [HIGH] CVE-2019-7175: imagemagick - In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders... In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c. Scope: local bookworm: resolved (fixed in 8:6.9.11.24+dfsg-1) bullseye: resolved (fixed in 8:6.9.11.24+dfsg-1) forky: resolved (fixed in 8:6.9.11.24+dfsg-1) sid: resolved (fixed in 8:6.9.11.24+dfsg-1) trixie: resolved (fixed in 8:6.9.11.24+dfsg-1)

CVE-2022-32546 [HIGH] CVE-2022-32546: imagemagick - A vulnerability was found in ImageMagick, causing an outside the range of repres... A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior. Scope: local bookworm: resolved (fixed in 8:6.9.11.60+dfsg-1.5) bullseye:

CVE-2022-32547 [HIGH] CVE-2022-32547: imagemagick - In ImageMagick, there is load of misaligned address for type 'double', which req... In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by ImageMagick, this causes a negative impact to application availability or other problems related to undefined behavior. Scope: lo

CVE-2014-9839 [HIGH] CVE-2014-9839: imagemagick - magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to caus... magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access). Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2004-0981 [CRITICAL] CVE-2004-0981: graphicsmagick - Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows r... Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file. Scope: local bookworm: resolved (fixed in 1.1.7-1) bullseye: resolved (fixed in 1.1.7-1) forky: resolved (fixed in 1.1.7-1) sid: resolved (fixed in 1.1.7-1) trixie: resolved (fixed in 1.1.7-1)

CVE-2017-15281 [HIGH] CVE-2017-15281: imagemagick - ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to c... ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to "Conditional jump or move depends on uninitialised value(s)." Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfs

CVE-2017-15015 [HIGH] CVE-2017-15015: imagemagick - ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDeleg... ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in coders/pdf.c. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fixed in 8:6.9.9.34+dfsg-3) trixie: resolved (fixed in 8:6.9.9.34+dfsg-3)

CVE-2015-8895 [HIGH] CVE-2015-8895: imagemagick - Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote... Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service (application crash) via a crafted length value, which triggers a buffer overflow. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-7) bullseye: resolved (fixed in 8:6.8.9.9-7) forky: resolved (fixed in 8:6.8.9.9-7) sid: resolved (fixed in 8:6.

CVE-2017-14607 [HIGH] CVE-2017-14607: imagemagick - In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage ... In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed

CVE-2014-9848 [HIGH] CVE-2014-9848: imagemagick - Memory leak in ImageMagick allows remote attackers to cause a denial of service ... Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption). Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2014-9850 [HIGH] CVE-2014-9850: imagemagick - Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of ... Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption). Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2014-9842 [HIGH] CVE-2014-9842: imagemagick - Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9... Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resol

CVE-2016-10067 [HIGH] CVE-2016-10067: imagemagick - magick/memory.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a... magick/memory.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via vectors involving "too many exceptions," which trigger a buffer overflow. Scope: local bookworm: resolved (fixed in 8:6.9.6.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.6.2+dfsg-2) forky: resolved (fixed in 8:6.9.6.2+dfsg-2) sid: resolved (f

CVE-2007-1667 [CRITICAL] CVE-2007-1667: graphicsmagick - Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org li... Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for ImageMagick, allow user-assisted remote attackers to cause a denial of service (crash) or obtain sensitive information via crafted images with large or negative values that trigger a buffer overflow. Scope: local bookwo

CVE-2019-12979 [HIGH] CVE-2019-12979: imagemagick - ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the Syn... ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage in magick/image.c. Scope: local bookworm: resolved (fixed in 8:6.9.11.24+dfsg-1) bullseye: resolved (fixed in 8:6.9.11.24+dfsg-1) forky: resolved (fixed in 8:6.9.11.24+dfsg-1) sid: resolved (fixed in 8:6.9

CVE-2016-10050 [HIGH] CVE-2016-10050: imagemagick - Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in Image... Heap-based buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.9.4-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted RLE file. Scope: local bookworm: resolved (fixed in 8:6.9.6.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.6.2+dfsg-2) forky: resolved (fixed in 8:6.9.

CVE-2019-12977 [HIGH] CVE-2019-12977: imagemagick - ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the Wri... ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c. Scope: local bookworm: resolved (fixed in 8:6.9.11.24+dfsg-1) bullseye: resolved (fixed in 8:6.9.11.24+dfsg-1) forky: resolved (fixed in 8:6.9.11.24+dfsg-1) sid: resolved (fixed in 8:6.9.11.24+dfsg-1) trixie: resolved (fixed in 8:6.9.11.24+dfsg-1)

CVE-2019-12978 [HIGH] CVE-2019-12978: imagemagick - ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the Rea... ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c. Scope: local bookworm: resolved (fixed in 8:6.9.11.24+dfsg-1) bullseye: resolved (fixed in 8:6.9.11.24+dfsg-1) forky: resolved (fixed in 8:6.9.11.24+dfsg-1) sid: resolved (fixed in 8:6.9.11.24+dfsg-1) trixie: resolved (fixed in 8:6.9.11.24+dfsg

CVE-2017-12418 [HIGH] CVE-2017-12418: imagemagick - ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions ... ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in MagickCore/constitute.c. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fixed in 8:6.9.9.34+dfsg-3) trixie