Debian Imagemagick vulnerabilities

CVE-2018-7470 [MEDIUM] CVE-2018-7470: imagemagick - An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless fun... An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service (segmentation violation) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.9.39+dfsg-1) bullseye: resolved (fixed in 8:6.9.9.39+dfsg-1) forky: resolved (fixed in 8:6.9.9.39+dfsg-1) sid: resolved (f

CVE-2017-11141 [MEDIUM] CVE-2017-11141: imagemagick - The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory le... The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted MAT file, related to incorrect ordering of a SetImageExtent call. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-12) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-12) forky: resolved (fixed in 8:6.9.7.4+dfsg-12

CVE-2017-8765 [MEDIUM] CVE-2017-8765: imagemagick - The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a m... The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-7) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-7) forky: resolved (fixed in 8:6.9.7.4+dfsg-7) sid: resolved (fixed in 8:6.9.7.4+dfsg-7) trixie:

CVE-2017-12674 [MEDIUM] CVE-2017-12674: imagemagick - In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function... In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fixed in 8:6.9.9.34+dfsg-3) t

CVE-2017-12563 [MEDIUM] CVE-2017-12563: imagemagick - In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the funct... In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which allows attackers to cause a denial of service. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-16) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-16) forky: resolved (fixed in 8:6.9.7.4+dfsg-16) sid: resolved (fixed in 8:6.9.7.4+dfsg-16

CVE-2017-11644 [MEDIUM] CVE-2017-11644: imagemagick - When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a M... When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadMATImage() function in coders/mat.c. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-14) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-14) forky: resolved (fixed in 8:6.9.7.4+dfsg-14) sid: resolved (fixed in 8:6.9.7.4+dfsg-14) trixie: resolved (fixed in

CVE-2017-11531 [MEDIUM] CVE-2017-11531: imagemagick - When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a M... When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteHISTOGRAMImage() function in coders/histogram.c. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-13) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-13) forky: resolved (fixed in 8:6.9.7.4+dfsg-13) sid: resolved (fixed in 8:6.9.7.4+dfsg-13) trixie: resol

CVE-2017-14505 [MEDIUM] CVE-2017-14505: imagemagick - DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles ... DrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL arrays, which allows attackers to perform Denial of Service (NULL pointer dereference and application crash in AcquireQuantumMemory within MagickCore/memory.c) by providing a crafted Image File as input. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bull

CVE-2017-12670 [MEDIUM] CVE-2017-12670: imagemagick - In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to... In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in MagickCore/image.c, which allows attackers to cause a denial of service. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-14) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-14) forky: resolved (fixed in 8:6.9.7.4+dfsg-14) s

CVE-2017-11166 [MEDIUM] CVE-2017-11166: imagemagick - The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory le... The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of color-map entries) field in the header of an XWD file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-7) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-7) forky: resolved (fixed in 8:6.9.7.4+df

CVE-2017-12671 [MEDIUM] CVE-2017-12671: imagemagick - In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, lea... In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemory in MagickCore/memory.c, which allows attackers to cause a denial of service. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-15) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-15) forky: resolved (fixed in 8:6.9.7

CVE-2006-0082 [HIGH] CVE-2006-0082: imagemagick - Format string vulnerability in the SetImageInfo function in image.c for ImageMag... Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name, a variant of CVE-2005-0397, and as demonstrated using the convert

CVE-2017-5508 [MEDIUM] CVE-2017-5508: imagemagick - Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick befor... Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-1) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-1) forky: resolved (fixed in 8:6.9.7.4+dfsg-1) si

CVE-2006-5456 [MEDIUM] CVE-2006-5456: graphicsmagick - Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 a... Multiple buffer overflows in GraphicsMagick before 1.1.7 and ImageMagick 6.0.7 allow user-assisted attackers to cause a denial of service and possibly execute arbitrary code via (1) a DCM image that is not properly handled by the ReadDCMImage function in coders/dcm.c, or (2) a PALM image that is not properly handled by the ReadPALMImage function in coders/pal

CVE-2026-23874 [MEDIUM] CVE-2026-23874: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d... ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL (Magick Scripting Language) `` command when writing to MSL format. Version 7.1.2-13 fixes the issue. Scope: local bookworm: resolved (fixed in 8:6.9.11.60+dfsg-1.6+deb12u6) bullseye: resol

CVE-2015-8896 [MEDIUM] CVE-2015-8896: imagemagick - Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows r... Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-7) bullseye: resolved (fixed in 8:6.8.9.9-7) forky: resolved (fixed in 8:6.8.9.9-7) sid: resolved (fixed in 8:6.8.9.9-7) trixie: resolved (fi

CVE-2019-16709 [MEDIUM] CVE-2019-16709: graphicsmagick - ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCrea... ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage. Scope: local bookworm: resolved (fixed in 1.4+really1.3.33+hg16117-1) bullseye: resolved (fixed in 1.4+really1.3.33+hg16117-1) forky: resolved (fixed in 1.4+really1.3.33+hg16117-1) sid: resolved (fixed in 1.4+really1.3.33+hg16117-1) trixie: resolved (fixed in 1.4+really

CVE-2012-0259 [MEDIUM] CVE-2012-0259: imagemagick - The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 ... The GetEXIFProperty function in magick/property.c in ImageMagick before 6.7.6-3 allows remote attackers to cause a denial of service (crash) via a zero value in the component count of an EXIF XResolution tag in a JPEG file, which triggers an out-of-bounds read. Scope: local bookworm: resolved (fixed in 8:6.7.4.0-4) bullseye: resolved (fixed in 8:6.7.4.0-4) forky

CVE-2017-9500 [MEDIUM] CVE-2017-9500: imagemagick - In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function Reset... In ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function ResetImageProfileIterator, which allows attackers to cause a denial of service via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-13) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-13) forky: resolved (fixed in 8:6.9.7.4+dfsg-13) sid: resolved (fixed in 8:6.9.7.4+df

CVE-2017-7606 [MEDIUM] CVE-2017-7606: imagemagick - coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable v... coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-4) bullseye: resolved (fi