https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:04:31 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03444 bdu:2021-03444 https://cve.radiocsirt.org/vuln/bdu:2021-03444 https://cve.radiocsirt.org/vuln/euvd-2026-47413 EUVD-2026-47413 https://cve.radiocsirt.org/vuln/euvd-2026-47413 https://cve.radiocsirt.org/vuln/fkie_cve-2020-29599 <p>ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.</p> <p>ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-29599 https://cve.radiocsirt.org/vuln/ghsa-685x-r4m9-ffxr <p>ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.</p> <p>ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.</p> https://cve.radiocsirt.org/vuln/ghsa-685x-r4m9-ffxr https://cve.radiocsirt.org/vuln/gsd-2020-29599 gsd-2020-29599 https://cve.radiocsirt.org/vuln/gsd-2020-29599 https://cve.radiocsirt.org/vuln/oesa-2021-1007 <p><strong>Affected:</strong> openEuler:20.03-LTS: ImageMagick, openEuler:20.03-LTS-SP1: ImageMagick</p> <p>Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\n Security Fix(es):\r\n\r\n A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to ImageMagick 7.0.8-68.(CVE-2020-27762)\r\n\r\n A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-69.(CVE-2020-27766)\r\n\r\n WritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which could lead to values outside the range of repre…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS: ImageMagick, openEuler:20.03-LTS-SP1: ImageMagick</p> <p>Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\n Security Fix(es):\r\n\r\n A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to ImageMagick 7.0.8-68.(CVE-2020-27762)\r\n\r\n A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-69.(CVE-2020-27766)\r\n\r\n WritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which could lead to values outside the range of repre…</p> https://cve.radiocsirt.org/vuln/oesa-2021-1007 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0136-1 <p>Security update for ImageMagick</p> <p>Security update for ImageMagick</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:0136-1 https://cve.radiocsirt.org/vuln/suse-su-2021:0153-1 <p>Security update for ImageMagick</p> <p>Security update for ImageMagick</p> https://cve.radiocsirt.org/vuln/suse-su-2021:0153-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-29599 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: imagemagick</p> <p>ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: imagemagick</p> <p>ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-29599 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0621 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ImageMagick ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in ImageMagick ausnutzen, um beliebigen Programmcode mit Benutzerrechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0621