Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 163
Reset filtersImageMagick: Policy Bypass in concatenate operation due to missing checks
ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments
ImageMagick: Infinite Loop in connected-components when providing invalid arguments
ImageMagick: Stack Overflow in MVG decoder due to missing depth check.
ImageMagick: Use-After-Free in crafted 8BIM when identifying an image
ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged
ImageMagick has a Heap Buffer Over-Write in SF3 encoder when writing multi-frame image
ImageMagick: Memory Leak in wand option parser when providing invalid arguments
ImageMagick has Null Pointer Dereference caused by the distort operation when passing incorrect arguments
ImageMagick has a Use-After-Free when allocation in CheckPrimitiveExtent fails
ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop
ImageMagick: Policy Bypass can Trigger an Out-of-Memory condition
ImageMagick: Policy Bypass can read disallowed files via symlink
ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions
ImageMagick has a Heap Buffer Over-Write in MAT decoder on 32-bit systems
ImageMagick Vulnerable to Stack Overflow in its MVG Decoder
ImageMagick has an Infinite Loop in subimage-search with crafted image
ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method
ImageMagick: Heap Buffer Over-Read in distributed pixel cache server
ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model
ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking
ImageMagick: Heap Buffer Over-Write in distributed pixel cache server
ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.