Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 160
Reset filtersImageMagick has heap buffer overflow in YUV 4:2:2 decoder
ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)
ImageMagick: MSL - Stack overflow in ProcessMSLScript
ImageMagick Has Signed Integer Overflow in SIXEL Decoder, Leading to Memory Corruption
ImageMagick: MSL attribute stack buffer overflow leads to out of bounds write.
ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder
ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder
ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder
ImageMagick has a Path Policy TOCTOU symlink race bypass
ImageMagick has a heap Buffer Over-read in its DJVU image format handler
ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images
ImageMagick: Heap-based Buffer Overflow in GetPixelIndex due to metadata-cache desynchronization
ImageMagick: Memory Leak in multiple coders that write raw pixel data
ImageMagick: Memory leak in coders/txt.c without freetype
ImageMagick: SVG-to-MVG Command Injection via coders/svg.c
ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS
mageMagick has a possible use-after-free write in its PDB decoder
ImageMagick has a possible heap Use After Free vulnerability in its meta coder
ImageMagick: Integer Overflow in PSB (PSD v2) RLE decoding path causes heap Out of Bounds reads for 32-bit builds
ImageMagick: Invalid MSL <map> can result in a use after free
ImageMagick has a possible infinite loop in its JPEG encoder when using `jpeg:extent`
ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile
ImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.