Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 163
Reset filtersImageMagick: Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder
ImageMagick: MSL image stack index may fail to refresh, leading to leaked images
ImageMagick has a heap buffer over-read in its MAP image decoder
ImageMagick: Memory allocation with excessive without limits in the internal SVG decoder
ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"
Image Magick has a Memory Leak in coders/ashlar.c
ImageMagick: Stack buffer overflow in FTXT reader via oversized integer field
ImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access
ImageMagick: Policy bypass through path traversal allows reading restricted content despite secured policy
ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer
ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write
ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash
ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image
ImageMagick: Code Injection via PostScript header in ps coders
ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths
ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)
ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions
ImageMagick has memory leak in msl encoder
ImageMagick: Possible memory leak in ASHLAR encoder
ImageMagick: Out of bounds read in multiple coders read raw pixel data
ImageMagick: Infinite loop vulnerability when parsing a PCD file
ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS
ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.