Vulnerabilities > Imagemagick > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-12-15 CVE-2014-8561 Infinite Loop vulnerability in multiple products
imagemagick 6.8.9.6 has remote DOS via infinite loop
network
low complexity
imagemagick debian CWE-835
6.5
2019-11-11 CVE-2019-18853 Uncontrolled Recursion vulnerability in Imagemagick
ImageMagick before 7.0.9-0 allows remote attackers to cause a denial of service because XML_PARSE_HUGE is not properly restricted in coders/svg.c, related to SVG and libxml2.
network
low complexity
imagemagick CWE-674
6.5
2019-09-23 CVE-2019-16713 Memory Leak vulnerability in multiple products
ImageMagick 7.0.8-43 has a memory leak in coders/dot.c, as demonstrated by PingImage in MagickCore/constitute.c.
network
low complexity
imagemagick canonical opensuse debian CWE-401
6.5
2019-09-23 CVE-2019-16712 Memory Leak vulnerability in multiple products
ImageMagick 7.0.8-43 has a memory leak in Huffman2DEncodeImage in coders/ps3.c, as demonstrated by WritePS3Image.
network
low complexity
imagemagick opensuse CWE-401
6.5
2019-09-23 CVE-2019-16711 Memory Leak vulnerability in multiple products
ImageMagick 7.0.8-40 has a memory leak in Huffman2DEncodeImage in coders/ps2.c.
network
low complexity
imagemagick debian opensuse canonical CWE-401
6.5
2019-09-23 CVE-2019-16710 Memory Leak vulnerability in multiple products
ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c.
network
low complexity
imagemagick debian opensuse canonical CWE-401
6.5
2019-09-23 CVE-2019-16709 Memory Leak vulnerability in multiple products
ImageMagick 7.0.8-35 has a memory leak in coders/dps.c, as demonstrated by XCreateImage.
network
low complexity
imagemagick opensuse canonical CWE-401
6.5
2019-09-23 CVE-2019-16708 Memory Leak vulnerability in multiple products
ImageMagick 7.0.8-35 has a memory leak in magick/xwindow.c, related to XCreateImage.
network
low complexity
imagemagick canonical opensuse debian CWE-401
6.5
2019-08-18 CVE-2019-15141 Out-of-bounds Read vulnerability in multiple products
WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service (application crash resulting from a heap-based buffer over-read) via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and TIFFWriteDirectoryTagColormap in tif_dirwrite.c of LibTIFF.
network
low complexity
imagemagick opensuse CWE-125
6.5
2019-08-18 CVE-2019-15139 Out-of-bounds Read vulnerability in Imagemagick 7.0.841
The XWD image (X Window System window dumping file) parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service (application crash resulting from an out-of-bounds Read) in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability than CVE-2019-11472.
network
low complexity
imagemagick CWE-125
6.5