Debian Imagemagick vulnerabilities

CVE-2016-4562 [HIGH] CVE-2016-4562: imagemagick - The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 ... The DrawDashPolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles calculations of certain vertices integer data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file. Scope: local bookworm: resolved (fixed in 8:

CVE-2016-4563 [HIGH] CVE-2016-4563: imagemagick - The TraceStrokePolygon function in MagickCore/draw.c in ImageMagick before 6.9.4... The TraceStrokePolygon function in MagickCore/draw.c in ImageMagick before 6.9.4-0 and 7.x before 7.0.1-2 mishandles the relationship between the BezierQuantum value and certain strokes data, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted file. Scope: local

CVE-2019-10650 [HIGH] CVE-2019-10650: imagemagick - In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the funct... In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or information disclosure via a crafted image file. Scope: local bookworm: resolved (fixed in 8:6.9.10.23+dfsg-2.1) bullseye: resolved (fixed in 8:6.9.10.23+dfsg-2.1) forky: resolved (fixed in

CVE-2017-16546 [HIGH] CVE-2017-16546: imagemagick - The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not proper... The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service (use of uninitialized data or invalid memory allocation) or possibly have unspecified other impact via a malformed WPG file. Scope: local bookworm: resolved (fixed in 8:6.9.9.3

CVE-2018-9135 [HIGH] CVE-2018-9135: imagemagick - In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPIma... In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c. Scope: local bookworm: resolved (fixed in 8:6.9.10.8+dfsg-1) bullseye: resolved (fixed in 8:6.9.10.8+dfsg-1) forky: resolved (fixed in 8:6.9.10.8+dfsg-1) sid: resolved (fixed in 8:6.9.10.8+dfsg-1) trixie: resolved (fixed in 8:6.9.10.8+dfsg-1)

CVE-2019-11597 [HIGH] CVE-2019-11597: imagemagick - In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the funct... In ImageMagick 7.0.8-43 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. Scope: local bookworm: resolved (fixed in 8:6.9.11.24+dfsg-1) bullseye: resolved (fixed in 8:6.9.11.24+dfsg-1) forky: resolved (fixe

CVE-2017-15016 [HIGH] CVE-2017-15016: imagemagick - ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhM... ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders/emf.c. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fixed in 8:6.9.9.34+dfsg-3) trixie: resolved (fixed in 8:6.9.9.34+dfsg-3)

CVE-2019-7397 [HIGH] CVE-2019-7397: graphicsmagick - In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory... In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c. Scope: local bookworm: resolved (fixed in 1.4~hg15896-1) bullseye: resolved (fixed in 1.4~hg15896-1) forky: resolved (fixed in 1.4~hg15896-1) sid: resolved (fixed in 1.4~hg15896-1) trixie: resolved (fixed in 1.4~hg15896-1)

CVE-2017-5510 [HIGH] CVE-2017-5510: imagemagick - coders/psd.c in ImageMagick allows remote attackers to have unspecified impact v... coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-1) bullseye: resolved (fixed in 8:6.9.7.4+dfsg-1) forky: resolved (fixed in 8:6.9.7.4+dfsg-1) sid: resolved (fixed in 8:6.9.7.4+dfsg-1) trixie: resolved (fixed in 8:6.

CVE-2019-13307 [HIGH] CVE-2019-13307: imagemagick - ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statisti... ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows. Scope: local bookworm: resolved (fixed in 8:6.9.11.24+dfsg-1) bullseye: resolved (fixed in 8:6.9.11.24+dfsg-1) forky: resolved (fixed in 8:6.9.11.24+dfsg-1) sid: resolved (fixed in 8:6.9.11.24+dfsg-1) trixie: resolved (fixed in 8:6.9

CVE-2014-9822 [HIGH] CVE-2014-9822: imagemagick - Heap-based buffer overflow in ImageMagick allows remote attackers to have unspec... Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2014-9820 [HIGH] CVE-2014-9820: imagemagick - Heap-based buffer overflow in ImageMagick allows remote attackers to have unspec... Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2014-9817 [HIGH] CVE-2014-9817: imagemagick - Heap-based buffer overflow in ImageMagick allows remote attackers to have unspec... Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2014-9821 [HIGH] CVE-2014-9821: imagemagick - Heap-based buffer overflow in ImageMagick allows remote attackers to have unspec... Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file. Scope: local bookworm: resolved (fixed in 8:6.8.9.9-4) bullseye: resolved (fixed in 8:6.8.9.9-4) forky: resolved (fixed in 8:6.8.9.9-4) sid: resolved (fixed in 8:6.8.9.9-4) trixie: resolved (fixed in 8:6.8.9.9-4)

CVE-2017-14626 [CRITICAL] CVE-2017-14626: imagemagick - ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the func... ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c. Scope: local bookworm: resolved (fixed in 8:6.9.9.34+dfsg-3) bullseye: resolved (fixed in 8:6.9.9.34+dfsg-3) forky: resolved (fixed in 8:6.9.9.34+dfsg-3) sid: resolved (fixed in 8:6.9.9.34+dfsg-3) trixie: resolved (fixed in 8:6.9.9.34+dfsg-3)

CVE-2022-28463 [HIGH] CVE-2022-28463: imagemagick - ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow. ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow. Scope: local bookworm: resolved (fixed in 8:6.9.11.60+dfsg-1.5) bullseye: resolved (fixed in 8:6.9.11.60+dfsg-1.3+deb11u2) forky: resolved (fixed in 8:6.9.11.60+dfsg-1.5) sid: resolved (fixed in 8:6.9.11.60+dfsg-1.5) trixie: resolved (fixed in 8:6.9.11.60+dfsg-1.5)

CVE-2007-4987 [CRITICAL] CVE-2007-4987: imagemagick - Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before ... Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code via a crafted image file, which triggers the writing of a '\0' character to an out-of-bounds address. Scope: local bookworm: resolved (fixed in 7:6.2.4.5.dfsg1-2) bullseye: resolved (fixed in 7:6.2.4.5.dfsg1-2) fo

CVE-2020-27766 [HIGH] CVE-2020-27766: imagemagick - A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submi... A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined b

CVE-2026-25969 [MEDIUM] CVE-2026-25969: imagemagick - ImageMagick is free and open-source software used for editing and manipulating d... ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak exists in `coders/ashlar.c`. The `WriteASHLARImage` allocates a structure. However, when an exception is thrown, the allocated memory is not properly released, resulting in a potential memory leak. Version 7.1.2-15 contains a

CVE-2017-11449 [HIGH] CVE-2017-11449: imagemagick - coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and ... coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot validate blob sizes, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an image received from stdin. Scope: local bookworm: resolved (fixed in 8:6.9.7.4+dfsg-12) bullseye: resolved (fixed in 8:6.9.