Debian Imagemagick vulnerabilities

CVE-2017-8349 [MEDIUM] CVE-2017-8349: imagemagick - In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to c... In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service (memory leak) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-7) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-7) forky: resolved (fixed in 8:6.9.7.4+dfsg-7) sid: resolved (fixed in 8:6.9.7.4+dfsg-7) trixie: resolved (fixed in 8:6.9

CVE-2017-8351 [MEDIUM] CVE-2017-8351: imagemagick - In ImageMagick 7.0.5-5, the ReadPCDImage function in pcd.c allows attackers to c... In ImageMagick 7.0.5-5, the ReadPCDImage function in pcd.c allows attackers to cause a denial of service (memory leak) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-7) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-7) forky: resolved (fixed in 8:6.9.7.4+dfsg-7) sid: resolved (fixed in 8:6.9.7.4+dfsg-7) trixie: resolved (fixed in 8:6.9

CVE-2017-8355 [MEDIUM] CVE-2017-8355: imagemagick - In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to c... In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-7) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-7) forky: resolved (fixed in 8:6.9.7.4+dfsg-7) sid: resolved (fixed in 8:6.9.7.4+dfsg-7) trixie: resolved (fixed in 8:6.9

CVE-2017-8352 [MEDIUM] CVE-2017-8352: imagemagick - In ImageMagick 7.0.5-5, the ReadXWDImage function in xwd.c allows attackers to c... In ImageMagick 7.0.5-5, the ReadXWDImage function in xwd.c allows attackers to cause a denial of service (memory leak) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-7) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-7) forky: resolved (fixed in 8:6.9.7.4+dfsg-7) sid: resolved (fixed in 8:6.9.7.4+dfsg-7) trixie: resolved (fixed in 8:6.9

CVE-2017-8347 [MEDIUM] CVE-2017-8347: imagemagick - In ImageMagick 7.0.5-5, the ReadEXRImage function in exr.c allows attackers to c... In ImageMagick 7.0.5-5, the ReadEXRImage function in exr.c allows attackers to cause a denial of service (memory leak) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-7) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-7) forky: resolved (fixed in 8:6.9.7.4+dfsg-7) sid: resolved (fixed in 8:6.9.7.4+dfsg-7) trixie: resolved (fixed in 8:6.9

CVE-2017-8344 [MEDIUM] CVE-2017-8344: imagemagick - In ImageMagick 7.0.5-5, the ReadPCXImage function in pcx.c allows attackers to c... In ImageMagick 7.0.5-5, the ReadPCXImage function in pcx.c allows attackers to cause a denial of service (memory leak) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-7) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-7) forky: resolved (fixed in 8:6.9.7.4+dfsg-7) sid: resolved (fixed in 8:6.9.7.4+dfsg-7) trixie: resolved (fixed in 8:6.9

CVE-2017-8350 [MEDIUM] CVE-2017-8350: imagemagick - In ImageMagick 7.0.5-5, the ReadJNGImage function in png.c allows attackers to c... In ImageMagick 7.0.5-5, the ReadJNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-7) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-7) forky: resolved (fixed in 8:6.9.7.4+dfsg-7) sid: resolved (fixed in 8:6.9.7.4+dfsg-7) trixie: resolved (fixed in 8:6.9

CVE-2025-62594 [MEDIUM] CVE-2025-62594: imagemagick - ImageMagick is a software suite to create, edit, compose, or convert bitmap imag... ImageMagick is a software suite to create, edit, compose, or convert bitmap images. ImageMagick versions prior to 7.1.2-8 are vulnerable to denial-of-service due to unsigned integer underflow and division-by-zero in the CLAHEImage function. When tile width or height is zero, unsigned underflow occurs in pointer arithmetic, leading to out-of-bounds memory acces

CVE-2017-9262 [MEDIUM] CVE-2017-9262: imagemagick - In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows att... In ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a denial of service (memory leak) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-10) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-10) forky: resolved (fixed in 8:6.9.7.4+dfsg-10) sid: resolved (fixed in 8:6.9.7.4+dfsg-10) trixie: resolved

CVE-2017-13133 [MEDIUM] CVE-2017-13133: imagemagick - In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset val... In ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (load_tile memory exhaustion) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fi

CVE-2017-13061 [MEDIUM] CVE-2017-13061: imagemagick - In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the funct... In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows attackers to cause a denial of service (ReadPSDImage memory exhaustion) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in

CVE-2017-11529 [MEDIUM] CVE-2017-11529: imagemagick - The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x ... The ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service (memory leak) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-12) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-12) forky: resolved (fixed in 8:6.9.7.4+dfsg-12) sid: resolved (fixed in 8:

CVE-2017-17884 [MEDIUM] CVE-2017-17884: imagemagick - In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the functi... In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted PNG image file. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: reso

CVE-2017-12565 [MEDIUM] CVE-2017-12565: imagemagick - In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function Re... In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-15) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-15) forky: resolved (fixed in 8:6.9.7.4+dfsg-15) sid: resolved (fixed in 8:6.9.7.4+dfsg-15) t

CVE-2017-17886 [MEDIUM] CVE-2017-17886: imagemagick - In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the functi... In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service via a crafted psd image file. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: res

CVE-2017-17883 [MEDIUM] CVE-2017-17883: imagemagick - In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the functi... In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which allows attackers to cause a denial of service via a crafted PGX image file. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved

CVE-2017-11534 [MEDIUM] CVE-2017-11534: imagemagick - When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a M... When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the lite_font_map() function in coders/wmf.c. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-13) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-13) forky: resolved (fixed in 8:6.9.7.4+dfsg-13) sid: resolved (fixed in 8:6.9.7.4+dfsg-13) trixie: resolved (fixed i

CVE-2026-33535 [MEDIUM] CVE-2026-33535: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d... ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, an out-of-bounds write of a zero byte exists in the X11 `display` interaction path that could lead to a crash. Versions 7.1.2-18 and 6.9.13-43 patch the issue. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 8:7.1

CVE-2019-12974 [MEDIUM] CVE-2019-12974: imagemagick - A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and ... A NULL pointer dereference in the function ReadPANGOImage in coders/pango.c and the function ReadVIDImage in coders/vid.c in ImageMagick 7.0.8-34 allows remote attackers to cause a denial of service via a crafted image. Scope: local bookworm: resolved (fixed in 8:6.9.11.24+dfsg-1) bullseye: resolved (fixed in 8:6.9.11.24+dfsg-1) forky: resolved (fixed in 8:6.9

CVE-2016-10070 [MEDIUM] CVE-2016-10070: imagemagick - Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMa... Heap-based buffer overflow in the CalcMinMax function in coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file. Scope: local bookworm: resolved (fixed in 8:6.9.6.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.6.2+dfsg-2) forky: resolved (fixed in 8:6.9.6.2