https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:55:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01036 bdu:2021-01036 https://cve.radiocsirt.org/vuln/bdu:2021-01036 https://cve.radiocsirt.org/vuln/cnvd-2021-23803 cnvd-2021-23803 https://cve.radiocsirt.org/vuln/cnvd-2021-23803 https://cve.radiocsirt.org/vuln/euvd-2026-46680 EUVD-2026-46680 https://cve.radiocsirt.org/vuln/euvd-2026-46680 https://cve.radiocsirt.org/vuln/fkie_cve-2020-27753 <p>There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported that the issues were in `AcquireMagickMemory()` because that is where LeakSanitizer detected the leaks, but the patch resolves issues in the MIFF coder, which incorrectly handles data being passed to `AcquireMagickMemory()`. This flaw affects ImageMagick versions prior to 7.0.9-0.</p> <p>There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported that the issues were in `AcquireMagickMemory()` because that is where LeakSanitizer detected the leaks, but the patch resolves issues in the MIFF coder, which incorrectly handles data being passed to `AcquireMagickMemory()`. This flaw affects ImageMagick versions prior to 7.0.9-0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-27753 https://cve.radiocsirt.org/vuln/ghsa-m43q-5c9p-x5fh <p>There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported that the issues were in `AcquireMagickMemory()` because that is where LeakSanitizer detected the leaks, but the patch resolves issues in the MIFF coder, which incorrectly handles data being passed to `AcquireMagickMemory()`. This flaw affects ImageMagick versions prior to 7.0.9-0.</p> <p>There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported that the issues were in `AcquireMagickMemory()` because that is where LeakSanitizer detected the leaks, but the patch resolves issues in the MIFF coder, which incorrectly handles data being passed to `AcquireMagickMemory()`. This flaw affects ImageMagick versions prior to 7.0.9-0.</p> https://cve.radiocsirt.org/vuln/ghsa-m43q-5c9p-x5fh https://cve.radiocsirt.org/vuln/gsd-2020-27753 gsd-2020-27753 https://cve.radiocsirt.org/vuln/gsd-2020-27753 https://cve.radiocsirt.org/vuln/oesa-2021-1219 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: ImageMagick</p> <p>Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves. Security Fix(es): There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported that the issues were in `AcquireMagickMemory()` because that is where LeakSanitizer detected the leaks, but the patch resolves issues in the MIFF coder, which incorrectly handles data being passed to `AcquireMagickMemory()`. This flaw affects ImageMagick versions prior to 7.0.9-0.(CVE-2020-27753) TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `&amp;quot;dc:format=\&amp;quot;image/dng\&amp;quot;` within `profile` due to improper string handling, when a crafted input file is provided to ImageMagick. The patch uses a StringInfo type instead of a raw C string to remedy this. This could cause an impact to availability of the application. This flaw affects ImageMagick versions prior to 7.0.9-0.(CVE-2020-25667)…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: ImageMagick</p> <p>Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves. Security Fix(es): There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported that the issues were in `AcquireMagickMemory()` because that is where LeakSanitizer detected the leaks, but the patch resolves issues in the MIFF coder, which incorrectly handles data being passed to `AcquireMagickMemory()`. This flaw affects ImageMagick versions prior to 7.0.9-0.(CVE-2020-27753) TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `&amp;quot;dc:format=\&amp;quot;image/dng\&amp;quot;` within `profile` due to improper string handling, when a crafted input file is provided to ImageMagick. The patch uses a StringInfo type instead of a raw C string to remedy this. This could cause an impact to availability of the application. This flaw affects ImageMagick versions prior to 7.0.9-0.(CVE-2020-25667)…</p> https://cve.radiocsirt.org/vuln/oesa-2021-1219 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0136-1 <p>Security update for ImageMagick</p> <p>Security update for ImageMagick</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:0136-1 https://cve.radiocsirt.org/vuln/suse-su-2021:0153-1 <p>Security update for ImageMagick</p> <p>Security update for ImageMagick</p> https://cve.radiocsirt.org/vuln/suse-su-2021:0153-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-27753 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: imagemagick, Ubuntu:18.04:LTS: imagemagick, Ubuntu:20.04:LTS: imagemagick</p> <p>There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported that the issues were in `AcquireMagickMemory()` because that is where LeakSanitizer detected the leaks, but the patch resolves issues in the MIFF coder, which incorrectly handles data being passed to `AcquireMagickMemory()`. This flaw affects ImageMagick versions prior to 7.0.9-0.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: imagemagick, Ubuntu:18.04:LTS: imagemagick, Ubuntu:20.04:LTS: imagemagick</p> <p>There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported that the issues were in `AcquireMagickMemory()` because that is where LeakSanitizer detected the leaks, but the patch resolves issues in the MIFF coder, which incorrectly handles data being passed to `AcquireMagickMemory()`. This flaw affects ImageMagick versions prior to 7.0.9-0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-27753 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0622 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0622