Where
AND
-Infinity
0
Severity
9.8
Null Pointer Dereference
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability i ...

1 / 3
Source: Debian
First published (updated )
Severity
9.8
Null Pointer Dereference
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was fou ...

1 / 3
Source: Debian
First published (updated )
Severity
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.

1 / 2
First published (updated )
Severity
9.8
Null Pointer Dereference
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c.

1 / 2
First published (updated )
Severity
9.8
Null Pointer Dereference
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability i ...

1 / 3
Source: Debian
First published (updated )
Severity
9.8
Null Pointer Dereference
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability i ...

1 / 3
Source: Debian
First published (updated )
Severity
8.8
Double Free
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A flaw was found in ImageMagick 7.0.7-25 Q16. WriteEPTImage function in coders/ept.c allows remote attackers to cause a denial of service (MagickCore/memory.c double free and application crash) or possibly have unspecified other impact via a crafted file.

Reference: https://github.com/ImageMagick/ImageMagick/issues/1025

Patch: https://github.com/ImageMagick/ImageMagick/commit/6355db269e03f879c516cf9d592c72e157bc75d6

1 / 4
Source: Red Hat
First published (updated )
Severity
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file.

1 / 2
First published (updated )
Severity
8.8
Null Pointer Dereference
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in Im ...

1 / 3
Source: Debian
First published (updated )
Severity
8.8
Null Pointer Dereference
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability i ...

1 / 3
Source: Debian
First published (updated )
Severity
8.8
Null Pointer Dereference
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability i ...

1 / 3
Source: Debian
First published (updated )
Severity
8.8
Null Pointer Dereference
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability i ...

1 / 3
Source: Debian
First published (updated )
Severity
8.8
Buffer Overflow
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
Severity
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 24 July 2024

1 / 2
Source: Ubuntu
First published (updated )
Severity
8.1
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

embed/ephy-web-view.c in GNOME Web (aka Epiphany) through 3.31.4 allows address bar spoofing because a page load triggered by JavaScript leads to updating an address as if it were triggered by a safer visit type (e.g., VISITLINK, VISITTYPED, VISITBOOKMARK, or VISITHOMEPAGE).

Upstream issue: https://gitlab.gnome.org/GNOME/epiphany/issues/532

1 / 3
Source: Red Hat
First published (updated )
Severity
7.8
Null Pointer Dereference, Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A flaw in the Linux kernels implementation of the ath10k USB device driver could allow an attacker with the ability to plug in custom-crafted hardware to create a null pointer dereference via an incomplete address in an endpoint descriptor.

This will crash the system.

Upstream Patch:

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=bfd6e6e6c5d2ee43a3d9902b36e01fc7527ebb27

1 / 4
Source: Red Hat

Remedy

As the ath10k module will be auto-loaded when required, its use can be disabled by preventing the module from loading using the following instructions. On the command line, as root, execute the following command: # echo "install ath10k_usb /bin/true" >> /etc/modprobe.d/disable-ath10k_usb.conf The system will need to be restarted if the ath10k_usb module are loaded. In most circumstances, the kernel modules will be unable to be unloaded while the ath10k WiFi network interface is in use. If the system requires this module to work correctly, this mitigation may not be suitable. If you need further assistance, see KCS article https://access.redhat.com/solutions/41278 or contact Red Hat Global Support Services.
First published (updated )
Severity
7.8
Buffer Overflow
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

ImageMagick 7.0.8-50 Q16 has a stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors.

1 / 4
Source: Launchpad
First published (updated )
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Byobu Apport hook may disclose sensitive information since it automatically uploads the local user's .screenrc which may contain private hostnames, usernames and passwords. This issue affects: byobu

First published (updated )
Severity
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.

1 / 2
First published (updated )
Severity
7.2
Buffer Overflow
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
Severity
7.1
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in t ...

1 / 3
Source: Debian
First published (updated )
Severity
7.1
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Last updated 24 July 2024

1 / 2
Source: Ubuntu
First published (updated )
Severity
7.1
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Last updated 24 July 2024

1 / 3
Source: Ubuntu
First published (updated )
Severity
7.1
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Last updated 24 July 2024

1 / 2
Source: Ubuntu
First published (updated )
Severity
7.1
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In ImageMagick 7.0.7-12 Q16, an infinite loop vulnerability was found ...

1 / 3
Source: Debian
First published (updated )
Severity
7.1
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c.

1 / 2
First published (updated )
Severity
7.1
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In ImageMagick 7.0.7-1 Q16, a memory exhaustion vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allow remote attackers to cause a denial of service via a crafted file.

1 / 2
First published (updated )
Severity
6.5
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A flaw was found in ImageMagick 7.0.8-4. A memory leak in parse8BIM in coders/meta.c.

References: https://github.com/ImageMagick/ImageMagick/issues/1190

Upstream Patch: https://github.com/ImageMagick/ImageMagick6/commit/0812674565df667b1b3e4122ad259096de311c6c https://github.com/ImageMagick/ImageMagick/commit/082223fb992448dbb574747deac9a30f986c116e

1 / 4
Source: Red Hat
First published (updated )
Severity
6.5
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A flaw was found in ImageMagick 7.0.8-4. A memory leak in DecodeImage in coders/pcd.c.

References: https://github.com/ImageMagick/ImageMagick/issues/1193

Upstream Patch: https://github.com/ImageMagick/ImageMagick6/commit/e8f4f5e776002aa6ed490d7c6f65e10fa67359dd https://github.com/ImageMagick/ImageMagick/commit/957b6397b958a5881005df27eb97319b3175a3c9

1 / 4
Source: Red Hat
First published (updated )
Severity
6.5
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

A flaw was found in ImageMagick 7.0.8-4. A memory leak in ReadMIFFImage in coders/miff.c.

References: https://github.com/ImageMagick/ImageMagick/issues/1191

Upstream Patch: https://github.com/ImageMagick/ImageMagick6/commit/ae3eecad2f59e27123c1a6c891be75d06fc03656 https://github.com/ImageMagick/ImageMagick/commit/4b352c0be410ad900469a079e389178f878aded8

1 / 4
Source: Red Hat
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203