Vulnerabilities > Imagemagick > Imagemagick > 7.1.0.19

DATE CVE VULNERABILITY TITLE RISK
2022-09-19 CVE-2022-3213 Out-of-bounds Write vulnerability in multiple products
A heap buffer overflow issue was found in ImageMagick.
local
low complexity
imagemagick fedoraproject CWE-787
5.5
2022-08-29 CVE-2022-0284 Out-of-bounds Read vulnerability in Imagemagick
A heap-based-buffer-over-read flaw was found in ImageMagick's GetPixelAlpha() function of 'pixel-accessor.h'.
local
low complexity
imagemagick CWE-125
7.1
2022-08-29 CVE-2022-1115 Out-of-bounds Write vulnerability in Imagemagick
A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file.
local
low complexity
imagemagick CWE-787
5.5
2022-08-10 CVE-2022-2719 Reachable Assertion vulnerability in multiple products
In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list.
local
low complexity
fedoraproject imagemagick CWE-617
5.5
2022-06-16 CVE-2022-32545 Integer Overflow or Wraparound vulnerability in multiple products
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed.
local
low complexity
imagemagick redhat fedoraproject CWE-190
7.8
2022-06-16 CVE-2022-32546 Integer Overflow or Wraparound vulnerability in multiple products
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed.
local
low complexity
imagemagick redhat fedoraproject CWE-190
7.8
2022-06-16 CVE-2022-32547 Incorrect Type Conversion or Cast vulnerability in multiple products
In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at MagickCore/property.c.
local
low complexity
imagemagick redhat fedoraproject CWE-704
7.8
2022-04-29 CVE-2022-1114 Use After Free vulnerability in Imagemagick
A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm.c file.
local
low complexity
imagemagick CWE-416
7.1