IM
Product
ImageMagick
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 8Low 0
Watch
Add ImageMagick to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-3195 | 5.5 | Jun 16 | A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c Affected: Fixed in ImageMagick 6.9.12-26, ImageMagick 7.1.0-11 |
| CVE-2023-34474 | 5.5 | Jun 16 | A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c Affected: 7.1.1-10 |
| CVE-2023-34475 | 5.5 | Jun 16 | A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c Affected: 7.1.1-10 |
| CVE-2023-2157 | 5.5 | Jun 6 | A heap-based buffer overflow vulnerability was found in the ImageMagick package that can lead to the application crashing Affected: ImageMagick 7.1.1-9 |
| CVE-2023-34151 | 5.5 | May 30 | A vulnerability was found in ImageMagick Affected: ImageMagick-6.7 |
| CVE-2023-1906 | 5.5 | Apr 12 | A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c Affected: Fixed in ImageMagick v6.9.12-84, v 7.1.1-6. |
| CVE-2023-1289 | 5.5 | Mar 23 | A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault Affected: Fixed-in ImageMagick v7.1.1-0 |
| CVE-2022-2719 | 5.5 | Aug 9 | In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list Affected: ImageMagick versions before 7.1.0-30 |
Showing 8