Browse CVEs

CRITICAL 9.1 CVE-2025-32460 GraphicsMagick before 8e56520 has a heap-based buffer over-read in ReadJXLImage in coders/jxl.c, related to an ImportViewPixelArea call. Graphicsmagick 1.3.46+ Fix from $2,3002025-04-09 CRITICAL 9.8 CVE-2025-27796 ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlo… Graphicsmagick 1.3.46+ Fix from $2,3002025-03-07 HIGH 7.5 CVE-2025-27795 ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits. Graphicsmagick 1.3.46+ Fix from $1,9502025-03-07 MEDIUM 5.5 CVE-2020-21679 Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via conve… Graphicsmagick No fix yet Fix from $1,6002023-08-22 MEDIUM 6.5 CVE-2019-11473 coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting an XWD ima… Graphicsmagick Patch available Fix from $1,6002019-04-23 CRITICAL 9.8 CVE-2019-11005 In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a stack-based buffer overflow in the function SVGStartElement of coders/svg.c, which allows remo… Graphicsmagick after 1.3.31 Fix from $2,3002019-04-08 MEDIUM 6.5 CVE-2018-18544 There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c i… Graphicsmagick 1.3.31+ Fix from $1,6002018-10-21 HIGH 8.8 CVE-2017-18220 The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service (magick/b… Graphicsmagick Patch available Fix from $1,9502018-03-05 HIGH 8.8 CVE-2017-17498 WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (bit_stream.c MagickBitStreamMSBWrite hea… Graphicsmagick Patch available Fix from $1,9502017-12-11 HIGH 8.8 CVE-2017-16547 The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, wh… Graphicsmagick Patch available Fix from $1,9502017-11-06 HIGH 8.8 CVE-2017-16545 The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to ca… Graphicsmagick Patch available Fix from $1,9502017-11-05 MEDIUM 6.5 CVE-2017-15277EPSS 19% ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has ne… Graphicsmagick Patch available Fix from $1,6002017-10-12 MEDIUM 5.5 CVE-2017-14649 ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assertion failu… Graphicsmagick Patch available Fix from $1,6002017-09-21 MEDIUM 6.5 CVE-2017-14165 The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a len… Graphicsmagick Patch available Fix from $1,6002017-09-06 HIGH 8.8 CVE-2017-14103EPSS 30% The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain error con… Graphicsmagick Patch available Fix from $1,9502017-09-01 MEDIUM 6.5 CVE-2017-14042 A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26. The vulnerability causes a big memo… Graphicsmagick Patch available Fix from $1,6002017-08-30 MEDIUM 6.5 CVE-2017-13736 There are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service at… Graphicsmagick Mitigation only Fix from $1,6002017-08-29 MEDIUM 6.5 CVE-2017-13648 In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c. Graphicsmagick Patch available Fix from $1,6002017-08-23 HIGH 8.8 CVE-2017-13147 In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND… Graphicsmagick Patch available Fix from $1,9502017-08-23 MEDIUM 6.5 CVE-2017-13066 GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c. Graphicsmagick Mitigation only Fix from $1,6002017-08-22 MEDIUM 6.5 CVE-2017-11722 The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds read and a… Graphicsmagick Patch available Fix from $1,6002017-07-28 CRITICAL 9.8 CVE-2017-11636 GraphicsMagick 1.3.26 has a heap overflow in the WriteRGBImage() function in coders/rgb.c when processing multiple frames that have non-identical wid… Graphicsmagick Mitigation only Fix from $2,3002017-07-26 CRITICAL 9.8 CVE-2017-11637 GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of monochrome images. Graphicsmagick Mitigation only Fix from $2,3002017-07-26 CRITICAL 9.8 CVE-2017-11641 GraphicsMagick 1.3.26 has a Memory Leak in the PersistCache function in magick/pixel_cache.c during writing of Magick Persistent Cache (MPC) files. Graphicsmagick Mitigation only Fix from $2,3002017-07-26 CRITICAL 9.8 CVE-2017-11643 GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when processing multiple frames that have non-identical w… Graphicsmagick Mitigation only Fix from $2,3002017-07-26 HIGH 8.8 CVE-2017-11638 GraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a differe… Graphicsmagick Mitigation only Fix from $1,9502017-07-26 HIGH 8.8 CVE-2017-11642 GraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage() function in coders/map.c when processing a non-colormapped image, a diffe… Graphicsmagick Mitigation only Fix from $1,9502017-07-26 HIGH 8.8 CVE-2017-11403EPSS 28% The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a crafted fi… Graphicsmagick Patch available Fix from $1,9502017-07-18 MEDIUM 5.5 CVE-2017-11140 The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of a scanline, which allows remot… Graphicsmagick Patch available Fix from $1,6002017-07-10 HIGH 7.5 CVE-2017-11102 The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (application crash) during… Graphicsmagick Patch available Fix from $1,9502017-07-07