GR
Product
GraphicsMagick
123
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 17High 46Medium 48Low 0
Watch
Add GraphicsMagick to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-12921 | 6.5 | Mar 18 | In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG Affected: before 1.3.32 |
| CVE-2019-11474 | 6.5 | Apr 23 | coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (floating-point exception and application crash) by crafting an XWD image file, a different… Affected: 1.3.31 |
| CVE-2019-11473 | 6.5 | Apr 23 | coders/xwd.c in GraphicsMagick 1.3.31 allows attackers to cause a denial of service (out-of-bounds read and application crash) by crafting an XWD image file, a different… Affected: 1.3.31 |
| CVE-2019-11010 | 6.5 | Apr 8 | In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a memory leak in the function ReadMPCImage of coders/mpc.c, which allows attackers to cause a denial of service via a crafted… Affected: through 1.3.31 |
| CVE-2018-20189 | 6.5 | Dec 17 | In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct… Affected: 1.3.31 |
| CVE-2018-20184 | 6.5 | Dec 17 | In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a… Affected: 1.4 |
| CVE-2018-18544 | 6.5 | Oct 21 | There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31 Affected: before 1.3.31 |
| CVE-2018-9018 | 6.5 | Mar 25 | In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c Affected: 1.3.28 |
| CVE-2017-18231 | 6.5 | Mar 14 | An issue was discovered in GraphicsMagick 1.3.26 Affected: 1.3.26 |
| CVE-2017-18230 | 6.5 | Mar 14 | An issue was discovered in GraphicsMagick 1.3.26 Affected: 1.3.26 |
| CVE-2017-18229 | 6.5 | Mar 14 | An issue was discovered in GraphicsMagick 1.3.26 Affected: 1.3.26 |
| CVE-2017-18219 | 6.5 | Mar 5 | An issue was discovered in GraphicsMagick 1.3.26 Affected: 1.3.26 |
| CVE-2018-5685 | 6.5 | Jan 14 | In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function (coders/bmp.c) Affected: 1.3.27 |
| CVE-2017-16353 | 6.5 | Nov 1 | GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based… Affected: 1.3.26 |
| CVE-2017-15277 | 6.5 | Oct 12 | ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local… Affected: 1.3.26 |
| CVE-2017-14997 | 6.5 | Oct 4 | GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in ReadPICTImage in coders/pict.c Affected: 1.3.26 |
| CVE-2017-14994 | 6.5 | Oct 4 | ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted DICOM image, related to the… Affected: 1.3.26 |
| CVE-2017-14733 | 6.5 | Sep 25 | ReadRLEImage in coders/rle.c in GraphicsMagick 1.3.26 mishandles RLE headers that specify too few colors, which allows remote attackers to cause a denial of service (heap-based… Affected: 1.3.26 |
| CVE-2017-14504 | 6.5 | Sep 17 | ReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does not ensure the correct number of colors for the XV 332 format, leading to a NULL Pointer Dereference Affected: 1.3.26 |
| CVE-2017-14314 | 6.5 | Sep 12 | Off-by-one error in the DrawImage function in magick/render.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (DrawDashPolygon heap-based buffer… Affected: 1.3.26 |
| CVE-2017-14165 | 6.5 | Sep 6 | The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory allocation is excessive because it depends only on a length field in a header Affected: 1.3.26 |
| CVE-2017-14042 | 6.5 | Aug 30 | A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26 Affected: 1.3.26 |
| CVE-2017-13777 | 6.5 | Aug 30 | GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version==10 case that results in the reader not returning; it would… Affected: 1.3.26 |
| CVE-2017-13776 | 6.5 | Aug 30 | GraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex image data" version!=10 case that results in the reader not returning; it would… Affected: 1.3.26 |
| CVE-2017-13775 | 6.5 | Aug 30 | GraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() in coders/jnx.c whereby large amounts of CPU and memory resources may be consumed although the file itself… Affected: 1.3.26 |
| CVE-2017-13737 | 6.5 | Aug 29 | There is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack Affected: 1.3.26 |
| CVE-2017-13736 | 6.5 | Aug 29 | There are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1.3.26 that will lead to a remote denial of service attack Affected: 1.3.26 |
| CVE-2017-13648 | 6.5 | Aug 23 | In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c Affected: 1.3.26 |
| CVE-2017-13066 | 6.5 | Aug 22 | GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c Affected: 1.3.26 |
| CVE-2017-13065 | 6.5 | Aug 22 | GraphicsMagick 1.3.26 has a NULL pointer dereference vulnerability in the function SVGStartElement in coders/svg.c Affected: 1.3.26 |
| CVE-2017-13064 | 6.5 | Aug 22 | GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:311:12 Affected: 1.3.26 |
| CVE-2017-13063 | 6.5 | Aug 22 | GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12 Affected: 1.3.26 |
| CVE-2017-11722 | 6.5 | Jul 28 | The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a… Affected: 1.3.26 |
| CVE-2020-21679 | 5.5 | Aug 22 | Buffer Overflow vulnerability in WritePCXImage function in pcx.c in GraphicsMagick 1.4 allows remote attackers to cause a denial of service via converting of crafted image file to… Affected: 1.4 |
| CVE-2017-14649 | 5.5 | Sep 21 | ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assertion failure in magick/pixel_cache.c,… Affected: 1.3.26 |
| CVE-2017-11140 | 5.5 | Jul 10 | The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of a scanline, which allows remote attackers to cause a denial… Affected: 1.3.26 |
| CVE-2017-10800 | 5.5 | Jul 3 | When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service (OOM) in ReadMATImage() if the size specified for a MAT Object is larger… Affected: 1.3.25 |
| CVE-2017-10799 | 5.5 | Jul 3 | When GraphicsMagick 1.3.25 processes a DPX image (with metadata indicating a large width) in coders/dpx.c, a denial of service (OOM) can occur in ReadDPXImage() Affected: 1.3.25 |
| CVE-2017-10794 | 5.5 | Jul 2 | When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer overflow occurs, related to… Affected: 1.3.25 |
| CVE-2017-6335 | 5.5 | Mar 14 | The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause a denial of service (out-of-bounds read and application… Affected: through 1.3.25 |
| CVE-2016-9830 | 5.5 | Mar 1 | The MagickRealloc function in memory.c in Graphicsmagick 1.3.25 allows remote attackers to cause a denial of service (crash) via large dimensions in a jpeg image Affected: 1.3.25 |
| CVE-2016-5240 | 5.5 | Feb 27 | The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service (infinite… Affected: through 1.3.23 |
| CVE-2016-5241 | 5.5 | Feb 3 | magick/render.c in GraphicsMagick before 1.3.24 allows remote attackers to cause a denial of service (arithmetic exception and application crash) via a crafted svg file Affected: through 1.3.23 |
| CVE-2016-2318 | 5.5 | Feb 3 | GraphicsMagick 1.3.23 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted SVG file, related to the (1) DrawImage function in… Affected: 1.3.23 |
| CVE-2016-2317 | 5.5 | Feb 3 | Multiple buffer overflows in GraphicsMagick 1.3.23 allow remote attackers to cause a denial of service (crash) via a crafted SVG file, related to the (1) TracePoint function in… Affected: 1.3.23 |
| CVE-2015-8808 | 5.5 | Jul 13 | The DecodeImage function in coders/gif.c in GraphicsMagick 1.3.18 allows remote attackers to cause a denial of service (uninitialized memory access) via a crafted GIF file Affected: through 1.3.17 |
| CVE-2018-20185 | 5.3 | Dec 17 | In GraphicsMagick 1.4 snapshot-20181209 Q8 on 32-bit platforms, there is a heap-based buffer over-read in the ReadBMPImage function of bmp.c, which allows attackers to cause a… Affected: 1.4 |
| CVE-2026-103118 | 4.3 | Sep 30 | GraphicsMagick WPG File wpg.c ExtractPostscript recursion Affected: 1.3.0; 1.3.1; 1.3.2; 1.3.3; 1.3.4; 1.3.5; +34 more |
Showing 48
