Debian Imagemagick vulnerabilities

CVE-2017-15281 [HIGH] CVE-2017-15281: imagemagick - ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to c... ReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file, related to "Conditional jump or move depends on uninitialised value(s)." Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfs

CVE-2016-7539 [HIGH] CVE-2016-7539: imagemagick - Memory leak in AcquireVirtualMemory in ImageMagick before 7 allows remote attack... Memory leak in AcquireVirtualMemory in ImageMagick before 7 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors. Scope: local bookworm: resolved (fixed in 8:6.9.6.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.6.2+dfsg-2) forky: resolved (fixed in 8:6.9.6.2+dfsg-2) sid: resolved (fixed in 8:6.9.6.2+dfsg-2) trixie: resolv

CVE-2019-7398 [HIGH] CVE-2019-7398: imagemagick - In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/... In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c. Scope: local bookworm: resolved (fixed in 8:6.9.11.24+dfsg-1) bullseye: resolved (fixed in 8:6.9.11.24+dfsg-1) forky: resolved (fixed in 8:6.9.11.24+dfsg-1) sid: resolved (fixed in 8:6.9.11.24+dfsg-1) trixie: resolved (fixed in 8:6.9.11.24+dfsg-1)

CVE-2014-9850 [HIGH] CVE-2014-9850: imagemagick - Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of ... Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption). Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2014-9842 [HIGH] CVE-2014-9842: imagemagick - Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9... Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resol

CVE-2019-7395 [HIGH] CVE-2019-7395: imagemagick - In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coder... In ImageMagick before 7.0.8-25, a memory leak exists in WritePSDChannel in coders/psd.c. Scope: local bookworm: resolved (fixed in 8:6.9.11.24+dfsg-1) bullseye: resolved (fixed in 8:6.9.11.24+dfsg-1) forky: resolved (fixed in 8:6.9.11.24+dfsg-1) sid: resolved (fixed in 8:6.9.11.24+dfsg-1) trixie: resolved (fixed in 8:6.9.11.24+dfsg-1)

CVE-2019-7396 [HIGH] CVE-2019-7396: imagemagick - In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders... In ImageMagick before 7.0.8-25, a memory leak exists in ReadSIXELImage in coders/sixel.c. Scope: local bookworm: resolved (fixed in 8:6.9.11.24+dfsg-1) bullseye: resolved (fixed in 8:6.9.11.24+dfsg-1) forky: resolved (fixed in 8:6.9.11.24+dfsg-1) sid: resolved (fixed in 8:6.9.11.24+dfsg-1) trixie: resolved (fixed in 8:6.9.11.24+dfsg-1)

CVE-2026-28689 [MEDIUM] CVE-2026-28689: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d... ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, domain="path" authorization is checked before final file open/use. A symlink swap between check-time and use-time bypasses policy-denied read/write. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41. Scope: local bookworm

CVE-2017-14739 [HIGH] CVE-2017-14739: imagemagick - The AcquireResampleFilterThreadSet function in magick/resample-private.h in Imag... The AcquireResampleFilterThreadSet function in magick/resample-private.h in ImageMagick 7.0.7-4 mishandles failed memory allocation, which allows remote attackers to cause a denial of service (NULL Pointer Dereference in DistortImage in MagickCore/distort.c, and application crash) via unspecified vectors. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg

CVE-2016-10067 [HIGH] CVE-2016-10067: imagemagick - magick/memory.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a... magick/memory.c in ImageMagick before 6.9.4-5 allows remote attackers to cause a denial of service (application crash) via vectors involving "too many exceptions," which trigger a buffer overflow. Scope: local bookworm: resolved (fixed in 8:6.9.6.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.6.2+dfsg-2) forky: resolved (fixed in 8:6.9.6.2+dfsg-2) sid: resolved (f

CVE-2008-1097 [MEDIUM] CVE-2008-1097: graphicsmagick - Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in code... Heap-based buffer overflow in the ReadPCXImage function in the PCX coder in coders/pcx.c in (1) ImageMagick 6.2.4-5 and 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .pcx file that triggers incorrect memory allocation for the scanline ar

CVE-2016-10051 [HIGH] CVE-2016-10051: imagemagick - Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in Ima... Use-after-free vulnerability in the ReadPWPImage function in coders/pwp.c in ImageMagick 6.9.5-5 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.6.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.6.2+dfsg-2) forky: resolved (fixed in 8:6.9.6.

CVE-2016-10056 [HIGH] CVE-2016-10056: imagemagick - Buffer overflow in the sixel_decode function in coders/sixel.c in ImageMagick be... Buffer overflow in the sixel_decode function in coders/sixel.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.6.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.6.2+dfsg-2) forky: resolved (fixed in 8:6.9.6.2+df

CVE-2016-10054 [HIGH] CVE-2016-10054: imagemagick - Buffer overflow in the WriteMAPImage function in coders/map.c in ImageMagick bef... Buffer overflow in the WriteMAPImage function in coders/map.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.6.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.6.2+dfsg-2) forky: resolved (fixed in 8:6.9.6.2+dfs

CVE-2016-10055 [HIGH] CVE-2016-10055: imagemagick - Buffer overflow in the WritePDBImage function in coders/pdb.c in ImageMagick bef... Buffer overflow in the WritePDBImage function in coders/pdb.c in ImageMagick before 6.9.5-8 allows remote attackers to cause a denial of service (application crash) or have other unspecified impact via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.6.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.6.2+dfsg-2) forky: resolved (fixed in 8:6.9.6.2+dfs

CVE-2014-9833 [HIGH] CVE-2014-9833: imagemagick - Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file. Heap overflow in ImageMagick 6.8.9-9 via a crafted psd file. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2014-9832 [HIGH] CVE-2014-9832: imagemagick - Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file. Heap overflow in ImageMagick 6.8.9-9 via a crafted pcx file. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2014-9835 [HIGH] CVE-2014-9835: imagemagick - Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file. Heap overflow in ImageMagick 6.8.9-9 via a crafted wpf file. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2014-9834 [HIGH] CVE-2014-9834: imagemagick - Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file. Heap overflow in ImageMagick 6.8.9-9 via a crafted pict file. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2017-11188 [HIGH] CVE-2017-11188: imagemagick - The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loo... The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-12) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-12) forky: resolved (fixed in 8:6.9.7.4+dfsg-12) sid: resolved (fixed in 8:6