Debian Imagemagick vulnerabilities

CVE-2016-10046 [MEDIUM] CVE-2016-10046: imagemagick - Heap-based buffer overflow in the DrawImage function in magick/draw.c in ImageMa... Heap-based buffer overflow in the DrawImage function in magick/draw.c in ImageMagick before 6.9.5-5 allows remote attackers to cause a denial of service (application crash) via a crafted image file. Scope: local bookworm: resolved (fixed in 8:6.9.6.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.6.2+dfsg-2) forky: resolved (fixed in 8:6.9.6.2+dfsg-2) sid: resolve

CVE-2016-9298 [MEDIUM] CVE-2016-9298: imagemagick - Heap overflow in the WaveletDenoiseImage function in MagickCore/fx.c in ImageMag... Heap overflow in the WaveletDenoiseImage function in MagickCore/fx.c in ImageMagick before 6.9.6-4 and 7.x before 7.0.3-6 allows remote attackers to cause a denial of service (crash) via a crafted image. Scope: local bookworm: resolved (fixed in 8:6.9.6.5+dfsg-1) bullseye: resolved (fixed in 8:6.9.6.5+dfsg-1) forky: resolved (fixed in 8:6.9.6.5+dfsg-1) sid: reso

CVE-2013-4298 [MEDIUM] CVE-2013-4298: imagemagick - The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows r... The ReadGIFImage function in coders/gif.c in ImageMagick before 6.7.8-8 allows remote attackers to cause a denial of service (memory corruption and application crash) via a crafted comment in a GIF image. Scope: local bookworm: resolved (fixed in 8:6.7.7.10-6) bullseye: resolved (fixed in 8:6.7.7.10-6) forky: resolved (fixed in 8:6.7.7.10-6) sid: resolved (fixed

CVE-2021-20244 [MEDIUM] CVE-2021-20244: imagemagick - A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who ... A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability. Scope: local bookworm: resolved (fixed in 8:6.9.11.60+dfsg-1.5) bullseye: resolved (f

CVE-2020-25676 [MEDIUM] CVE-2020-25676: imagemagick - In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePix... In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and inte

CVE-2023-1289 [MEDIUM] CVE-2023-1289: imagemagick - A vulnerability was discovered in ImageMagick where a specially created SVG file... A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault. This flaw allows a remote attacker to pass a specially crafted SVG file that leads to a segmentation fault, generating many trash files in "/tmp," resulting in a denial of service. When ImageMagick crashes, it generates a lot of trash fi

CVE-2025-55004 [HIGH] CVE-2025-55004: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d... ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in ReadOneMNGIMage. This can likely be used to leak subsequent memory contents into the outpu

CVE-2018-14434 [MEDIUM] CVE-2018-14434: imagemagick - ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/... ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c. Scope: local bookworm: resolved (fixed in 8:6.9.10.8+dfsg-1) bullseye: resolved (fixed in 8:6.9.10.8+dfsg-1) forky: resolved (fixed in 8:6.9.10.8+dfsg-1) sid: resolved (fixed in 8:6.9.10.8+dfsg-1) trixie: resolved (fixed in 8:6.9.10.8+dfsg-1)

CVE-2018-14435 [MEDIUM] CVE-2018-14435: imagemagick - ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c. ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c. Scope: local bookworm: resolved (fixed in 8:6.9.10.8+dfsg-1) bullseye: resolved (fixed in 8:6.9.10.8+dfsg-1) forky: resolved (fixed in 8:6.9.10.8+dfsg-1) sid: resolved (fixed in 8:6.9.10.8+dfsg-1) trixie: resolved (fixed in 8:6.9.10.8+dfsg-1)

CVE-2018-14436 [MEDIUM] CVE-2018-14436: imagemagick - ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c. ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c. Scope: local bookworm: resolved (fixed in 8:6.9.10.8+dfsg-1) bullseye: resolved (fixed in 8:6.9.10.8+dfsg-1) forky: resolved (fixed in 8:6.9.10.8+dfsg-1) sid: resolved (fixed in 8:6.9.10.8+dfsg-1) trixie: resolved (fixed in 8:6.9.10.8+dfsg-1)

CVE-2018-14437 [MEDIUM] CVE-2018-14437: imagemagick - ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c. ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c. Scope: local bookworm: resolved (fixed in 8:6.9.10.8+dfsg-1) bullseye: resolved (fixed in 8:6.9.10.8+dfsg-1) forky: resolved (fixed in 8:6.9.10.8+dfsg-1) sid: resolved (fixed in 8:6.9.10.8+dfsg-1) trixie: resolved (fixed in 8:6.9.10.8+dfsg-1)

CVE-2018-18016 [MEDIUM] CVE-2018-18016: imagemagick - ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/... ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c. Scope: local bookworm: resolved (fixed in 8:6.9.10.14+dfsg-1) bullseye: resolved (fixed in 8:6.9.10.14+dfsg-1) forky: resolved (fixed in 8:6.9.10.14+dfsg-1) sid: resolved (fixed in 8:6.9.10.14+dfsg-1) trixie: resolved (fixed in 8:6.9.10.14+dfsg-1)

CVE-2018-17965 [MEDIUM] CVE-2018-17965: imagemagick - ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/... ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c. Scope: local bookworm: resolved (fixed in 8:6.9.10.14+dfsg-1) bullseye: resolved (fixed in 8:6.9.10.14+dfsg-1) forky: resolved (fixed in 8:6.9.10.14+dfsg-1) sid: resolved (fixed in 8:6.9.10.14+dfsg-1) trixie: resolved (fixed in 8:6.9.10.14+dfsg-1)

CVE-2018-17966 [MEDIUM] CVE-2018-17966: imagemagick - ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/... ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c. Scope: local bookworm: resolved (fixed in 8:6.9.10.14+dfsg-1) bullseye: resolved (fixed in 8:6.9.10.14+dfsg-1) forky: resolved (fixed in 8:6.9.10.14+dfsg-1) sid: resolved (fixed in 8:6.9.10.14+dfsg-1) trixie: resolved (fixed in 8:6.9.10.14+dfsg-1)

CVE-2017-9439 [MEDIUM] CVE-2017-9439: imagemagick - In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in ... In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-12) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-12) forky: resolved (fixed in 8:6.9.7.4+dfsg-12) sid: resolved (fixed in 8:6.9.7.4+dfsg-12) t

CVE-2017-9440 [MEDIUM] CVE-2017-9440: imagemagick - In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel i... In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers to cause a denial of service via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-12) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-12) forky: resolved (fixed in 8:6.9.7.4+dfsg-12) sid: resolved (fixed in 8:6.9.7.4+dfsg-12)

CVE-2017-13058 [MEDIUM] CVE-2017-13058: imagemagick - In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function Wr... In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allows attackers to cause a denial of service via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fixed in 8:6

CVE-2017-13059 [MEDIUM] CVE-2017-13059: imagemagick - In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function Wr... In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to cause a denial of service (WriteJNGImage memory consumption) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.

CVE-2017-14324 [MEDIUM] CVE-2017-14324: imagemagick - In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the functio... In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fixed in

CVE-2017-13131 [MEDIUM] CVE-2017-13131: imagemagick - In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function Re... In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service (memory consumption in NewLinkedList in MagickCore/linked-list.c) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky