GR
Product
GraphicsMagick
On CISA KEVExploited in the wildRansomware-linked
77
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 31Medium 34Low 4
Watch
Add GraphicsMagick to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-38253 | 5.5 | Jul 14 | W3m: out of bounds read in growbuf_to_str() at w3m/indep.c Affected: 8.0 |
| CVE-2023-38252 | 5.5 | Jul 14 | W3m: out of bounds read in strnew_size() at w3m/str.c Affected: 8.0 |
| CVE-2023-32627 | 5.5 | Jul 10 | Floating point exception in src/voc.c Affected: 8.0 |
| CVE-2023-26590 | 5.5 | Jul 10 | Floating point exception in src/aiff.c Affected: 8.0 |
| CVE-2023-34475 | 5.5 | Jun 16 | A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c Affected: 8.0 |
| CVE-2023-3195 | 5.5 | Jun 16 | A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c Affected: 8.0 |
| CVE-2023-34474 | 5.5 | Jun 16 | A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c Affected: 8.0 |
| CVE-2023-34151 | 5.5 | May 30 | A vulnerability was found in ImageMagick Affected: 8.0 |
| CVE-2023-1906 | 5.5 | Apr 12 | A heap-based buffer overflow issue was discovered in ImageMagick's ImportMultiSpectralQuantum() function in MagickCore/quantum-import.c Affected: 8.0 |
| CVE-2023-1289 | 5.5 | Mar 23 | A vulnerability was discovered in ImageMagick where a specially created SVG file loads itself and causes a segmentation fault Affected: 8.0; 9.0 |
| CVE-2022-3213 | 5.5 | Sep 19 | A heap buffer overflow issue was found in ImageMagick Affected: 8.0; 9.0 |
| CVE-2022-2719 | 5.5 | Aug 9 | In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list Affected: 8.0 |
| CVE-2021-46142 | 5.5 | Jan 6 | An issue was discovered in uriparser before 0.9.6 Affected: 8.0 |
| CVE-2021-46141 | 5.5 | Jan 6 | An issue was discovered in uriparser before 0.9.6 Affected: 8.0 |
| CVE-2020-27842 | 5.5 | Jan 5 | There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0 Affected: 7.0 |
| CVE-2023-51766 | 5.3 | Dec 24 | Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations Affected: 7.0; 8.0; 9.0 |
| CVE-2023-5549 | 5.3 | Nov 9 | Moodle: insufficient capability checks when updating the parent of a course category Affected: 7.0 |
| CVE-2023-5548 | 5.3 | Nov 9 | Moodle: cache poisoning risk with endpoint revision numbers Affected: 7.0 |
| CVE-2023-5545 | 5.3 | Nov 9 | Moodle: auto-populated h5p author name causes a potential information leak Affected: 7.0 |
| CVE-2023-30943 | 5.3 | May 2 | Moodle: tinymce loaders susceptible to arbitrary folder creation Affected: 7.0 |
| CVE-2021-43560 | 5.3 | Nov 22 | A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions Affected: 7.0 |
| CVE-2023-5542 | 4.3 | Nov 9 | Moodle: students can view other users in "only see own membership" groups Affected: 7.0 |
| CVE-2022-40316 | 4.3 | Sep 30 | The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they… Affected: 8.0 |
| CVE-2023-5543 | 3.3 | Nov 9 | Moodle: duplicating a bigbluebutton activity assigns the same meeting id Affected: 7.0 |
| CVE-2023-5551 | 3.3 | Nov 9 | Moodle: forum summary report shows students from other groups when in separate groups mode Affected: 7.0 |
| CVE-2020-27818 | 3.3 | Dec 8 | A flaw was found in the check_chunk_name() function of pngcheck-2.4.0 Affected: 7.0; 8.0 |
| CVE-2020-14394 | 3.2 | Aug 17 | An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block (TRB) Ring Affected: 7.0 |