Imagemagick: >> Imagemagick >> 7.1.0-25 Security Vulnerabilities
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior.
CVSS Score
7.8
EPSS Score
0.013
Published
2022-06-16
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior.
CVSS Score
7.8
EPSS Score
0.013
Published
2022-06-16
In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by ImageMagick, this causes a negative impact to application availability or other problems related to undefined behavior.
CVSS Score
7.8
EPSS Score
0.013
Published
2022-06-16
ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
CVSS Score
7.8
EPSS Score
0.016
Published
2022-05-08
A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm.c file. This vulnerability is triggered when an attacker passes a specially crafted DICOM image file to ImageMagick for conversion, potentially leading to information disclosure and a denial of service.
CVSS Score
7.1
EPSS Score
0.012
Published
2022-04-29
Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a crafted file.
CVSS Score
7.8
EPSS Score
0.021
Published
2017-03-24
Page 18