Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 163
Reset filtersImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix
ImageMagick: Heap Buffer Over-Write of a single byte in the JP2 encoder.
ImageMagick: Stack overflow in fx operation
ImageMagick: Use-After-Free in MSL decoder.
ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion
ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression
ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions
ImageMagick: Policy Bypass in MNG coder could
ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.
ImageMagick: Policy Bypass in PSD decoder
ImageMagick: Out-of-Bounds Read of a single byte in meta encoder
ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define
ImageMagick: Heap Buffer Over-Read in IPTC encoder
ImageMagick has a memory leak in PNG encoder when writing a MNG image
ImageMagick has out-of-bounds access in ConnectedComponentsImage() via CLI-controlled connected-components:* artifacts
ImageMagick has a heap buffer overflow read in magnify operation via unrecognized magnify:method value
ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete
ImageMagick has has an off-by-one origin validation in allows out-of-bounds read in morphology processing
ImageMagick has a heap-buffer-overflow in FTXT encoder
ImageMagick has an off-by-one error in MSL decoder could result in crash
ImageMagick has a heap-use-after-free via XMP profile could result in a crash when printing the values.
ImageMagick has a heap out-of-bounds write in JP2 encoder
ImageMagick has a heap buffer overflow when encoding JXL image with a 16-bit float
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.