Vulnerabilities > Imagemagick > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-03-09 CVE-2021-20244 A flaw was found in ImageMagick in MagickCore/visual-effects.c.
local
low complexity
imagemagick redhat fedoraproject debian
5.5
2021-03-09 CVE-2021-20243 A flaw was found in ImageMagick in MagickCore/resize.c.
local
low complexity
imagemagick debian
5.5
2021-03-09 CVE-2021-20241 A flaw was found in ImageMagick in coders/jp2.c.
local
low complexity
imagemagick debian
5.5
2021-02-06 CVE-2021-20176 A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c.
local
low complexity
imagemagick debian
5.5
2020-12-08 CVE-2020-27756 Divide By Zero vulnerability in Imagemagick
In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined behavior.
local
low complexity
imagemagick CWE-369
5.5
2020-12-08 CVE-2020-27755 Memory Leak vulnerability in Imagemagick
in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size does not reset the size in the event there is an invalid size.
4.3
2020-12-08 CVE-2020-27753 Memory Leak vulnerability in Imagemagick
There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file.
4.3
2020-12-08 CVE-2020-27750 Divide By Zero vulnerability in multiple products
A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h.
local
low complexity
imagemagick debian CWE-369
5.5
2020-12-08 CVE-2020-25676 Integer Overflow or Wraparound vulnerability in multiple products
In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function.
local
low complexity
imagemagick debian CWE-190
5.5
2020-12-08 CVE-2020-25674 Heap-based Buffer Overflow vulnerability in multiple products
WriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an out-of-bounds READ via heap-buffer-overflow.
local
low complexity
imagemagick debian CWE-122
5.5