Skip to content
Noroxi

GraphicsMagick records

121 published records for vendor GraphicsMagick.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
7
With a fix record
100%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 22
  6. 23
  7. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

121 records
  • CVE-2016-5118
    54Plan

    The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (p

    CriticalCVSS 9.8No exploitEPSS 49%

    graphicsmagick · graphicsmagickJun 10, 2016

  • CVE-2017-14103
    44Plan

    The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain

    HighCVSS 8.8No exploitEPSS 30%

    graphicsmagick · graphicsmagickSep 1, 2017

  • CVE-2017-11403
    43Plan

    The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a c

    HighCVSS 8.8No exploitEPSS 28%

    graphicsmagick · graphicsmagickJul 17, 2017

  • CVE-2017-12936
    43Plan

    The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.

    HighCVSS 8.8No exploitEPSS 25%

    graphicsmagick · graphicsmagickAug 18, 2017

  • CVE-2008-6071
    42Plan

    Heap-based buffer overflow in the DecodeImage function in coders/pict.c in GraphicsMagick before 1.1.14, and 1.2.x before 1.2.3, allows remo

    CriticalCVSS 10.0No exploitEPSS 6%

    graphicsmagick · graphicsmagickFeb 10, 2009

  • CVE-2020-10938
    40Plan

    GraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c.

    CriticalCVSS 9.8No exploitEPSS 4%

    graphicsmagick · graphicsmagickMar 24, 2020

  • CVE-2016-7447
    40Plan

    Heap-based buffer overflow in the EscapeParenthesis function in GraphicsMagick before 1.3.25 allows remote attackers to have unspecified imp

    CriticalCVSS 9.8No exploitEPSS 4%

    graphicsmagick · graphicsmagickFeb 6, 2017

  • CVE-2016-7446
    40Plan

    Buffer overflow in the MVG and SVG rendering code in GraphicsMagick 1.3.24 allows remote attackers to have unspecified impact via unknown ve

    CriticalCVSS 9.8No exploitEPSS 3%

    graphicsmagick · graphicsmagickFeb 6, 2017

  • CVE-2016-7996
    40Plan

    Heap-based buffer overflow in the WPG format reader in GraphicsMagick 1.3.25 and earlier allows remote attackers to have unspecified impact

    CriticalCVSS 9.8No exploitEPSS 3%

    graphicsmagick · graphicsmagickJan 18, 2017

  • CVE-2019-11005
    40Plan

    In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a stack-based buffer overflow in the function SVGStartElement of coders/svg.c, which al

    CriticalCVSS 9.8No exploitEPSS 3%

    graphicsmagick · graphicsmagickApr 8, 2019

  • CVE-2017-11636
    40Plan

    GraphicsMagick 1.3.26 has a heap overflow in the WriteRGBImage() function in coders/rgb.c when processing multiple frames that have non-iden

    CriticalCVSS 9.8No exploitEPSS 3%

    graphicsmagick · graphicsmagickJul 26, 2017

  • CVE-2017-11139
    40Plan

    GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders/png.c.

    CriticalCVSS 9.8No exploitEPSS 2%

    graphicsmagick · graphicsmagickJul 9, 2017

  • CVE-2019-19951
    40Plan

    In GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c.

    CriticalCVSS 9.8No exploitEPSS 2%

    graphicsmagick · graphicsmagickDec 23, 2019

  • CVE-2019-19950
    40Plan

    In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c.

    CriticalCVSS 9.8No exploitEPSS 2%

    graphicsmagick · graphicsmagickDec 23, 2019

  • CVE-2017-11643
    40Plan

    GraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when processing multiple frames that have non-id

    CriticalCVSS 9.8No exploitEPSS 2%

    graphicsmagick · graphicsmagickJul 26, 2017

  • CVE-2017-11637
    40Plan

    GraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders/pcl.c during writes of monochrome images.

    CriticalCVSS 9.8No exploitEPSS 2%

    graphicsmagick · graphicsmagickJul 26, 2017

  • CVE-2017-11641
    40Plan

    GraphicsMagick 1.3.26 has a Memory Leak in the PersistCache function in magick/pixel_cache.c during writing of Magick Persistent Cache (MPC)

    CriticalCVSS 9.8No exploitEPSS 2%

    graphicsmagick · graphicsmagickJul 26, 2017

  • CVE-2017-16352
    39Monitor

    GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of t

    HighCVSS 8.8Proof of conceptEPSS 14%

    graphicsmagick · graphicsmagickNov 1, 2017

  • CVE-2007-0770
    39Monitor

    Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause a denial of service and possibly execute ar

    CriticalCVSS 9.3No exploitEPSS 5%

    graphicsmagick · graphicsmagickFeb 12, 2007

  • CVE-2025-27796
    39Monitor

    ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory i

    CriticalCVSS 9.8No exploitEPSS 0%

    graphicsmagick · graphicsmagickMar 7, 2025

  • CVE-2008-6070
    38Monitor

    Multiple heap-based buffer underflows in the ReadPALMImage function in coders/palm.c in GraphicsMagick before 1.2.3 allow remote attackers t

    CriticalCVSS 9.3No exploitEPSS 3%

    graphicsmagick · graphicsmagickFeb 10, 2009

  • CVE-2019-11006
    37Monitor

    In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which all

    CriticalCVSS 9.1No exploitEPSS 2%

    graphicsmagick · graphicsmagickApr 8, 2019

  • CVE-2019-19953
    37Monitor

    In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c.

    CriticalCVSS 9.1No exploitEPSS 2%

    graphicsmagick · graphicsmagickDec 23, 2019

  • CVE-2019-11008
    36Monitor

    In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c, which allow

    HighCVSS 8.8No exploitEPSS 3%

    graphicsmagick · graphicsmagickApr 8, 2019

  • CVE-2017-18220
    36Monitor

    The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service

    HighCVSS 8.8No exploitEPSS 3%

    graphicsmagick · graphicsmagickMar 5, 2018