Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 95
Reset filtersImageMagick: Stack overflow in fx operation
ImageMagick: Use-After-Free in MSL decoder.
ImageMagick: Infinite Loop in the MIFF decoder can lead to CPU exhaustion
ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression
ImageMagick: Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions
ImageMagick: Policy Bypass in MNG coder could
ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation.
ImageMagick: Policy Bypass in PSD decoder
ImageMagick: Out-of-Bounds Read of a single byte in meta encoder
ImageMagick: Out-of-Bounds Read in connected components when the user supplies an invalid keep-top define
ImageMagick: Heap Buffer Over-Read in IPTC encoder
ImageMagick has a memory leak in PNG encoder when writing a MNG image
ImageMagick has out-of-bounds access in ConnectedComponentsImage() via CLI-controlled connected-components:* artifacts
ImageMagick has a heap buffer overflow read in magnify operation via unrecognized magnify:method value
ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete
ImageMagick has has an off-by-one origin validation in allows out-of-bounds read in morphology processing
ImageMagick has a heap-buffer-overflow in FTXT encoder
ImageMagick has a heap-buffer-overflow in NewXMLTree which could result in crash
ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS
ImageMagick has heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation
ImageMagick has Heap Buffer Overflow in WaveletDenoiseImage
ImageMagick has Heap Buffer Over-Read in BilateralBlurImage
ImageMagick has heap-based buffer overflow in UHDR encoder
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.