Skip to content
Noroxi

ImageMagick records

839 published records for vendor imagemagick.

Researcher profile

Entered KEV
3 · 0.4%
Weaponized
3 · 0.4%
Pre-auth RCE
31
With a fix record
96.3%
Median publish → KEV
2008 days

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

839 records
  • CVE-2016-3714
    92Now

    The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x befor

    HighCVSS 8.4KEVWeaponizedEPSS 97%

    imagemagick · imagemagickMay 5, 2016

  • CVE-2016-3718
    75This week

    The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request

    MediumCVSS 5.5KEVWeaponizedEPSS 75%

    imagemagick · imagemagickMay 5, 2016

  • CVE-2016-3715
    75This week

    The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted im

    MediumCVSS 5.5KEVWeaponizedEPSS 75%

    imagemagick · imagemagickMay 5, 2016

  • CVE-2016-5118
    54Plan

    The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (p

    CriticalCVSS 9.8No exploitEPSS 49%

    graphicsmagick · graphicsmagickJun 10, 2016

  • CVE-2022-44268
    53Plan

    ImageMagick 7.1.0-49 is vulnerable to Information Disclosure.

    MediumCVSS 6.5Proof of conceptEPSS 89%

    imagemagick · imagemagickFeb 6, 2023

  • CVE-2022-44267
    49Plan

    ImageMagick 7.1.0-49 is vulnerable to Denial of Service.

    MediumCVSS 6.5Proof of conceptEPSS 76%

    imagemagick · imagemagickFeb 6, 2023

  • CVE-2016-5841
    43Plan

    Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fa

    CriticalCVSS 9.8No exploitEPSS 13%

    imagemagick · imagemagickDec 13, 2016

  • CVE-2004-0981
    42Plan

    Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain imag

    CriticalCVSS 10.0No exploitEPSS 5%

    imagemagick · imagemagickFeb 9, 2005

  • CVE-2018-16323
    41Plan

    ReadXBMImage in coders/xbm.c in ImageMagick before 7.0.8-9 leaves data uninitialized when processing an XBM file that has a negative pixel v

    MediumCVSS 6.5Proof of conceptEPSS 49%

    imagemagick · imagemagickSep 1, 2018

  • CVE-2023-34152
    41Plan

    A vulnerability was found in ImageMagick.

    CriticalCVSS 9.8Proof of conceptEPSS 8%

    imagemagick · imagemagickMay 30, 2023

  • CVE-2016-5691
    41Plan

    The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of

    CriticalCVSS 9.8No exploitEPSS 6%

    imagemagick · imagemagickDec 13, 2016

  • CVE-2016-5690
    41Plan

    The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified imp

    CriticalCVSS 9.8No exploitEPSS 6%

    imagemagick · imagemagickDec 13, 2016

  • CVE-2017-5511
    41Plan

    coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based b

    CriticalCVSS 9.8No exploitEPSS 5%

    imagemagick · imagemagickMar 24, 2017

  • CVE-2016-5689
    41Plan

    The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of

    CriticalCVSS 9.8No exploitEPSS 5%

    imagemagick · imagemagickDec 13, 2016

  • CVE-2016-10145
    41Plan

    Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy.

    CriticalCVSS 9.8No exploitEPSS 5%

    imagemagick · imagemagickMar 24, 2017

  • CVE-2016-10144
    40Plan

    coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check.

    CriticalCVSS 9.8No exploitEPSS 4%

    imagemagick · imagemagickMar 24, 2017

  • CVE-2014-9846
    40Plan

    Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.

    CriticalCVSS 9.8No exploitEPSS 4%

    imagemagick · imagemagickMar 20, 2017

  • CVE-2016-5687
    40Plan

    The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecifie

    CriticalCVSS 9.8No exploitEPSS 4%

    imagemagick · imagemagickDec 13, 2016

  • CVE-2014-9847
    40Plan

    The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.

    CriticalCVSS 9.8No exploitEPSS 4%

    imagemagick · imagemagickMar 20, 2017

  • CVE-2018-14551
    40Plan

    The ReadMATImageV4 function in coders/mat.c in ImageMagick 7.0.8-7 uses an uninitialized variable, leading to memory corruption.

    CriticalCVSS 9.8No exploitEPSS 4%

    imagemagick · imagemagickJul 23, 2018

  • CVE-2014-9843
    40Plan

    The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors.

    CriticalCVSS 9.8No exploitEPSS 3%

    imagemagick · imagemagickMar 20, 2017

  • CVE-2014-9841
    40Plan

    The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, re

    CriticalCVSS 9.8No exploitEPSS 3%

    imagemagick · imagemagickMar 20, 2017

  • CVE-2017-13139
    40Plan

    In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CL

    CriticalCVSS 9.8No exploitEPSS 3%

    imagemagick · imagemagickAug 23, 2017

  • CVE-2017-18211
    40Plan

    In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a pr

    CriticalCVSS 9.8No exploitEPSS 3%

    imagemagick · imagemagickMar 1, 2018

  • CVE-2014-9826
    40Plan

    ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.

    CriticalCVSS 9.8No exploitEPSS 3%

    imagemagick · imagemagickMar 30, 2017