Debian Imagemagick vulnerabilities

CVE-2017-12430 [HIGH] CVE-2017-12430: imagemagick - In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the funct... In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-13) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-13) forky: resolved (fixed in 8:6.9.7.4+dfsg-13) sid: resolved (fixed in 8:6.9.7.4+dfsg-13)

CVE-2017-12428 [HIGH] CVE-2017-12428: imagemagick - In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function Re... In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause a denial of service in CloneDrawInfo in draw.c. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-13) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-13) forky: resolved (fixed in 8:6.9.7.4+dfsg-13) sid: resolved (fixed i

CVE-2017-12429 [HIGH] CVE-2017-12429: imagemagick - In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the funct... In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-13) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-13) forky: resolved (fixed in 8:6.9.7.4+dfsg-13) sid: resolved (fixed in 8:6.9.7.4+dfsg-13

CVE-2007-4986 [MEDIUM] CVE-2007-4986: graphicsmagick - Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent... Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (2) .dib, (3) .xbm, (4) .xcf, or (5) .xwd image file, which triggers a heap-based buffer overflow. Scope: local bookworm: resolved (fixed in 1.1.11-1) bullseye: resolved (fixed in 1.1.11-1) forky: resolved (fixed in 1.1.

CVE-2017-15032 [CRITICAL] CVE-2017-15032: imagemagick - ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/y... ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fixed in 8:6.9.9.34+dfsg-3) trixie: resolved (fixed in 8:6.9.9.34+dfsg-3)

CVE-2017-14137 [HIGH] CVE-2017-14137: imagemagick - ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory ... ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fixed in 8:6.9.9.34+dfsg-3) trixie:

CVE-2017-12644 [HIGH] CVE-2017-12644: imagemagick - ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dc... ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fixed in 8:6.9.9.34+dfsg-3) trixie: resolved (fixed in 8:6.9.9.34+dfsg-3)

CVE-2026-28690 [MEDIUM] CVE-2026-28690: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d... ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow vulnerability exists in the MNG encoder. There is a bounds checks missing that could corrupting the stack with attacker-controlled data. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41. Scope: lo

CVE-2026-32259 [MEDIUM] CVE-2026-32259: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d... ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, when a memory allocation fails in the sixel encoder it would be possible to write past the end of a buffer on the stack. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41. Scope: local bookworm: open bullseye: open forky: resolved

CVE-2007-4988 [HIGH] CVE-2007-4988: graphicsmagick - Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 ... Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted width value in an image file, which triggers an integer overflow and a heap-based buffer overflow. Scope: local bookworm: resolved (fixed in 1.1.11-1) bullseye: resolved (fixed in 1.1.11-1) forky: resolved (f

CVE-2014-9854 [HIGH] CVE-2014-9854: imagemagick - coders/tiff.c in ImageMagick allows remote attackers to cause a denial of servic... coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors related to the "identification of image." Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-

CVE-2005-0762 [HIGH] CVE-2005-0762: imagemagick - Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows re... Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file. Scope: local bookworm: resolved (fixed in 5:6.0.0-1) bullseye: resolved (fixed in 5:6.0.0-1) forky: resolved (fixed in 5:6.0.0-1) sid: resolved (fixed in 5:6.0.0-1) trixie: resolved (fixed in 5:6.0.0-1)

CVE-2008-1096 [MEDIUM] CVE-2008-1096: graphicsmagick - The load_tile function in the XCF coder in coders/xcf.c in (1) ImageMagick 6.2.8... The load_tile function in the XCF coder in coders/xcf.c in (1) ImageMagick 6.2.8-0 and (2) GraphicsMagick (aka gm) 1.1.7 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted .xcf file that triggers an out-of-bounds heap write, possibly related to the ScaleCharToQuantum function. Scope: loc

CVE-2006-5868 [CRITICAL] CVE-2006-5868: imagemagick - Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.... Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via a crafted SGI image. Scope: local bookworm: resolved (fixed in 7:6.2.4.5.dfsg1-0.11) bullseye: resolved (fixed in 7:6.2.4.5.dfsg1-0.11) forky: resolved (fixed in 7:6.2.4.5.dfsg1-0.11) sid: resolved (fixed in 7:6.2.4.5.dfs

CVE-2018-16644 [MEDIUM] CVE-2018-16644: imagemagick - There is a missing check for length in the functions ReadDCMImage of coders/dcm.... There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image. Scope: local bookworm: resolved (fixed in 8:6.9.10.14+dfsg-1) bullseye: resolved (fixed in 8:6.9.10.14+dfsg-1) forky: resolved (fixed in 8:6

CVE-2016-7537 [MEDIUM] CVE-2016-7537: imagemagick - MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of ... MagickCore/memory.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted PDB file. Scope: local bookworm: resolved (fixed in 8:6.9.6.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.6.2+dfsg-2) forky: resolved (fixed in 8:6.9.6.2+dfsg-2) sid: resolved (fixed in 8:6.9.6.2+dfsg-2) trixie: resolved (fixed in 8:6.9.6.2

CVE-2018-16642 [MEDIUM] CVE-2018-16642: imagemagick - The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote att... The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write. Scope: local bookworm: resolved (fixed in 8:6.9.10.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.10.2+dfsg-2) forky: resolved (fixed in 8:6.9.10.2+dfsg-2) sid: resolved (fixed in 8:6.9.10.2+d

CVE-2021-3596 [MEDIUM] CVE-2021-3596: imagemagick - A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.... A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.c. This issue is due to not checking the return value from libxml2's xmlCreatePushParserCtxt() and uses the value directly, which leads to a crash and segmentation fault. Scope: local bookworm: resolved (fixed in 8:6.9.11.57+dfsg-1) bullseye: r

CVE-2017-13142 [MEDIUM] CVE-2017-13142: imagemagick - In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could t... In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for short files. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-15) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-15) forky: resolved (fixed in 8:6.9.7.4+dfsg-15) sid: resolved (fixed in 8:6.9.7.4+dfsg-15) trixie: resol

CVE-2017-13146 [HIGH] CVE-2017-13146: imagemagick - In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in ... In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-14) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-14) forky: resolved (fixed in 8:6.9.7.4+dfsg-14) sid: resolved (fixed in 8:6.9.7.4+dfsg-14) trixie: resolved (fixed in 8:6.9.7.4+dfsg-14