Debian Imagemagick vulnerabilities

CVE-2014-9807 [MEDIUM] CVE-2014-9807: imagemagick - The pdb coder in ImageMagick allows remote attackers to cause a denial of servic... The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2014-9840 [MEDIUM] CVE-2014-9840: imagemagick - ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of... ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted palm file. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2021-20241 [MEDIUM] CVE-2021-20241: imagemagick - A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a craft... A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability. Scope: local bookworm: resolved (fixed in 8:6.9.11.60+dfsg-1.5) bullseye: resolved (fixed in 8:6.9.1

CVE-2021-20243 [MEDIUM] CVE-2021-20243: imagemagick - A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits ... A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability. Scope: local bookworm: resolved (fixed in 8:6.9.11.60+dfsg-1.5) bullseye: resolved (fixed in

CVE-2008-3134 [MEDIUM] CVE-2008-3134: graphicsmagick - Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote... Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service (crash, infinite loop, or memory consumption) via (a) unspecified vectors in the (1) AVI, (2) AVS, (3) DCM, (4) EPT, (5) FITS, (6) MTV, (7) PALM, (8) RLA, and (9) TGA decoder readers; and (b) the GetImageCharacteristics function in magick/im

CVE-2020-27753 [MEDIUM] CVE-2020-27753: imagemagick - There are several memory leaks in the MIFF coder in /coders/miff.c due to improp... There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported that the issues were in `AcquireMagickMemory()` because that is wher

CVE-2023-34151 [HIGH] CVE-2023-34151: imagemagick - A vulnerability was found in ImageMagick. This security flaw ouccers as an undef... A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546). Scope: local bookworm: resolved (fixed in 8:6.9.11.60+dfsg-1.6+deb12u1) bullseye: resolved (fixed in 8:6.9.11.60+dfsg-1.3+deb11u3) forky: resolved (fixed in 8:6.9.12.98+dfsg1-2

CVE-2022-1115 [MEDIUM] CVE-2022-1115: imagemagick - A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function... A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an attacker passes a specially crafted TIFF image file to ImageMagick for conversion, potentially leading to a denial of service. Scope: local bookworm: resolved (fixed in 8:6.9.11.60+dfsg-1.6+deb12u1) bullseye: resolve

CVE-2023-3195 [MEDIUM] CVE-2023-3195: imagemagick - A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. Th... A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an attacker to trick the user into opening a specially crafted malicious tiff file, causing an application to crash, resulting in a denial of service. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 8:6.9.12.98+dfsg1-2) sid: resolved (fixed

CVE-2025-55005 [MEDIUM] CVE-2025-55005: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d... ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, when preparing to transform from Log to sRGB colorspaces, the logmap construction fails to handle cases where the reference-black or reference-white value is larger than 1024. This leads to corrupting memory beyond the end of the allocated l

CVE-2017-14139 [MEDIUM] CVE-2017-14139: imagemagick - ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/m... ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fixed in 8:6.9.9.34+dfsg-3) trixie: resolved (fixed in 8:6.9.9.34+dfsg-3)

CVE-2017-12654 [MEDIUM] CVE-2017-12654: imagemagick - The ReadPICTImage function in coders/pict.c in ImageMagick 7.0.6-3 allows attack... The ReadPICTImage function in coders/pict.c in ImageMagick 7.0.6-3 allows attackers to cause a denial of service (memory leak) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-16) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-16) forky: resolved (fixed in 8:6.9.7.4+dfsg-16) sid: resolved (fixed in 8:6.9.7.4+dfsg-16) trixie: resolved (

CVE-2017-9405 [MEDIUM] CVE-2017-9405: imagemagick - In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attacker... In ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a denial of service (memory leak) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-11) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-11) forky: resolved (fixed in 8:6.9.7.4+dfsg-11) sid: resolved (fixed in 8:6.9.7.4+dfsg-11) trixie: resolved (fixe

CVE-2017-9407 [MEDIUM] CVE-2017-9407: imagemagick - In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to... In ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial of service (memory leak) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-11) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-11) forky: resolved (fixed in 8:6.9.7.4+dfsg-11) sid: resolved (fixed in 8:6.9.7.4+dfsg-11) trixie: resolved (fixed in

CVE-2017-9409 [MEDIUM] CVE-2017-9409: imagemagick - In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows attackers to c... In ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows attackers to cause a denial of service (memory leak) via a crafted file. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-11) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-11) forky: resolved (fixed in 8:6.9.7.4+dfsg-11) sid: resolved (fixed in 8:6.9.7.4+dfsg-11) trixie: resolved (fixed in 8

CVE-2005-1739 [MEDIUM] CVE-2005-1739: imagemagick - The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r... The XWD Decoder in ImageMagick before 6.2.2.3, and GraphicsMagick before 1.1.6-r1, allows remote attackers to cause a denial of service (infinite loop) via an image with a zero color mask. Scope: local bookworm: resolved (fixed in 6:6.0.6.2-2.4) bullseye: resolved (fixed in 6:6.0.6.2-2.4) forky: resolved (fixed in 6:6.0.6.2-2.4) sid: resolved (fixed in 6:6.0.6.2

CVE-2026-27799 [MEDIUM] CVE-2026-27799: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d... ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the DJVU image format handler. The vulnerability occurs due to integer truncation when calculating the stride (row size) for pixel buffer allocation. The stride calculation over

CVE-2012-0248 [MEDIUM] CVE-2012-0248: imagemagick - ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of ser... ImageMagick 6.7.5-7 and earlier allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted image whose IFD contains IOP tags that all reference the beginning of the IDF. Scope: local bookworm: resolved (fixed in 8:6.6.9.7-6) bullseye: resolved (fixed in 8:6.6.9.7-6) forky: resolved (fixed in 8:6.6.9.7-6) sid: resolved (fixed in 8

CVE-2012-1186 [MEDIUM] CVE-2012-1186: imagemagick - Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6... Integer overflow in the SyncImageProfiles function in profile.c in ImageMagick 6.7.5-8 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted IOP tag offsets in the IFD in an image. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0248. Scope: local bookworm: resolved (fixed in 8:6.6.9.7-7) bullseye:

CVE-2016-10071 [MEDIUM] CVE-2016-10071: imagemagick - coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a de... coders/mat.c in ImageMagick before 6.9.4-0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted mat file. Scope: local bookworm: resolved (fixed in 8:6.9.6.2+dfsg-2) bullseye: resolved (fixed in 8:6.9.6.2+dfsg-2) forky: resolved (fixed in 8:6.9.6.2+dfsg-2) sid: resolved (fixed in 8:6.9.6.2+dfsg-2) trixie