{"id":"CVE-2023-3428","aliases":["DEBIAN-CVE-2023-3428","DSA-5628-1","EUVD-2023-44094","GHSA-c2rg-gpv2-725v","JLSEC-2026-908","MGASA-2024-0064","OESA-2023-1442","UBUNTU-CVE-2023-3428","USN-6200-1","openSUSE-SU-2024:13030-1"],"status":"published","title":"Imagemagick: heap-buffer-overflow in coders/tiff.c","description":"A heap-based buffer overflow vulnerability was found  in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.","severity":{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00314,"percentile":0.24448,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2023-06-29T00:00:00Z","modified":"2026-10-28T10:38:52Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.11.60+dfsg-1.6+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:6.9.12.98+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:6.9.12.98+dfsg1-2"],"sources":["osv"]},{"ecosystem":"Julia","package":"ImageMagick_jll","fixed_in":["7.1.1+1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"ImageMagick","fixed_in":["6.9.12.86-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"ImageMagick","fixed_in":["6.9.12.86-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"ImageMagick","fixed_in":["7.1.1.8-4.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"ImageMagick","fixed_in":["7.1.1.8-4.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"ImageMagick","fixed_in":["7.1.1.8-4.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"imagemagick","fixed_in":["8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"imagemagick","fixed_in":["8:6.9.11.60+dfsg-1.6ubuntu1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ImageMagick","fixed_in":["7.1.1.12-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.60+dfsg-1.6+deb12u1"}]}],"versions":["8:6.9.11.60+dfsg-1.6"]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.12.98+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.12.98+dfsg1-2"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.60+dfsg-1.3+deb11u3"}]}],"versions":["8:6.9.11.60+dfsg-1.3","8:6.9.11.60+dfsg-1.3+deb11u1","8:6.9.11.60+dfsg-1.3+deb11u2"],"bundled":7},{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.60+dfsg-1.6+deb12u1"}]}],"versions":["8:6.9.11.60+dfsg-1.6"],"bundled":7},{"source":"osv","ecosystem":"Julia","package":"ImageMagick_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"7.1.1+1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.29-1.mga9"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:9","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.29-1.mga9.tainted"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.12.86-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.12.86-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.8-4.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.8-4.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.8-4.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2"}]}],"versions":["8:6.9.11.60+dfsg-1ubuntu1","8:6.9.11.60+dfsg-1.3","8:6.9.11.60+dfsg-1.3build1","8:6.9.11.60+dfsg-1.3build2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.60+dfsg-1.6ubuntu1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.16+esm8"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1","8:6.8.9.9-7ubuntu5.16+esm2","8:6.8.9.9-7ubuntu5.16+esm3","8:6.8.9.9-7ubuntu5.16+esm4","8:6.8.9.9-7ubuntu5.16+esm5","8:6.8.9.9-7ubuntu5.16+esm6","8:6.8.9.9-7ubuntu5.16+esm7"],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+esm1"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7","8:6.9.7.4+dfsg-16ubuntu6.8","8:6.9.7.4+dfsg-16ubuntu6.9","8:6.9.7.4+dfsg-16ubuntu6.11","8:6.9.7.4+dfsg-16ubuntu6.12","8:6.9.7.4+dfsg-16ubuntu6.13","8:6.9.7.4+dfsg-16ubuntu6.14","8:6.9.7.4+dfsg-16ubuntu6.15"],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.10.23+dfsg-2.1ubuntu11.9"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8","8:6.9.10.23+dfsg-2.1ubuntu9","8:6.9.10.23+dfsg-2.1ubuntu10","8:6.9.10.23+dfsg-2.1ubuntu11","8:6.9.10.23+dfsg-2.1ubuntu11.1","8:6.9.10.23+dfsg-2.1ubuntu11.2","8:6.9.10.23+dfsg-2.1ubuntu11.4","8:6.9.10.23+dfsg-2.1ubuntu11.5","8:6.9.10.23+dfsg-2.1ubuntu11.6","8:6.9.10.23+dfsg-2.1ubuntu11.7"],"bundled":20},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2"}]}],"versions":["8:6.9.11.60+dfsg-1ubuntu1","8:6.9.11.60+dfsg-1.3","8:6.9.11.60+dfsg-1.3build1","8:6.9.11.60+dfsg-1.3build2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm1"],"bundled":20},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.1.12-1.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"extra_packages_for_enterprise_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"imagemagick","product":"imagemagick"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"}],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2023-3428","tags":["vdb-entry","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218369","tags":["issue-tracking","x_refsource_REDHAT","x_transferred","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3428","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-c2rg-gpv2-725v"},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/3xxx/CVE-2023-3428.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-3428","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0064.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32076","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6200-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1442","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-3428","tags":["report"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/a531d28e31309676ce8168c3b6dbbb5374b78790","tags":["report"]},{"url":"https://github.com/ImageMagick/ImageMagick6/commit/0d00400727170b0540a355a1bc52787bc7bcdea5","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3428","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-29599","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3610","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20224","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20241","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20243","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20244","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20246","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20309","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20313","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-39212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-28463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32545","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32546","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32547","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-1289","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-1906","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-3195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-34151","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-3428","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-3428","title":"Imagemagick: heap-buffer-overflow in coders/tiff.c","description":"A heap-based buffer overflow vulnerability was found  in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.","status":"published","published":"2023-10-04T18:02:23.724Z","modified":"2026-11-07T11:31:56.64Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-07T12:33:58.237937Z"}],"euvd":[{"id":"EUVD-2023-44094","description":"A heap-based buffer overflow vulnerability was found  in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.","status":"published","published":"2023-10-04T18:02:23Z","modified":"2026-11-07T11:31:56Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-07T12:09:17.956424Z"}],"ghsa":[{"id":"GHSA-c2rg-gpv2-725v","title":"A heap-based buffer overflow vulnerability was found  in coders/tiff.c in ImageMagick. This issue...","description":"A heap-based buffer overflow vulnerability was found  in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.","status":"published","published":"2023-10-04T21:30:22Z","modified":"2024-04-04T08:18:27Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:56:57.522724Z"}],"nvd":[{"id":"CVE-2023-3428","description":"A heap-based buffer overflow vulnerability was found  in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.","status":"published","published":"2023-10-04T19:15:10.277Z","modified":"2026-11-07T12:17:31.463Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-07T14:05:24.982965Z"}],"osv":[{"id":"CVE-2023-3428","title":"Imagemagick: heap-buffer-overflow in coders/tiff.c","description":"A heap-based buffer overflow vulnerability was found  in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.","status":"published","published":"2023-10-04T18:02:23.724Z","modified":"2026-11-09T07:05:46.580414008Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-08T02:57:30.447698Z"},{"id":"DEBIAN-CVE-2023-3428","description":"A heap-based buffer overflow vulnerability was found  in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.","status":"published","published":"2023-10-04T19:15:10.277Z","modified":"2026-11-08T09:47:24.696415737Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-08T10:03:28.621517Z"},{"id":"JLSEC-2026-908","description":"A heap-based buffer overflow vulnerability was found  in `coders/tiff.c` in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.","status":"published","published":"2026-07-30T16:02:27.435Z","modified":"2026-07-30T18:23:50.46573485Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2023-1442","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects,or draw text, lines, polygons, ellipses and Bézier curves.\n\nSecurity Fix(es):\n\nA vulnerability was found in ImageMagick \u0026lt;=7.1.1, where heap-based buffer overflow was found in coders/tiff.c.\n\nReferences:\nhttps://github.com/ImageMagick/ImageMagick/commit/a531d28e31309676ce8168c3b6dbbb5374b78790(CVE-2023-3428)","status":"published","published":"2023-07-29T11:05:54Z","modified":"2026-08-18T01:17:45.97145807Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"UBUNTU-CVE-2023-3428","description":"A heap-based buffer overflow vulnerability was found  in coders/tiff.c in ImageMagick. This issue may allow a local attacker to trick the user into opening a specially crafted file, resulting in an application crash and denial of service.","status":"published","published":"2023-06-29T00:00:00Z","modified":"2026-04-22T14:08:21.551823Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:21.882004Z"},{"id":"DSA-5628-1","title":"imagemagick - security update","status":"published","published":"2024-02-22T00:00:00Z","modified":"2026-03-09T02:09:32.072448Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0064","title":"Updated imagemagick packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\nA heap-based buffer overflow vulnerability was found in ImageMagick in\nversions prior to 7.0.11-14 in ReadTIFFImage() in coders/tiff.c. This\nissue is due to an incorrect setting of the pixel array size, which can\nlead to a crash and segmentation fault. (CVE-2021-3610)\nA stack-based buffer overflow issue was found in ImageMagick's\ncoders/tiff.c. This flaw allows an attacker to trick the user into\nopening a specially crafted malicious tiff file, causing an application\nto crash, resulting in a denial of service. (CVE-2023-3195)\nA heap-based buffer overflow vulnerability was found in coders/tiff.c in\nImageMagick. This issue may allow a local attacker to trick the user\ninto opening a specially crafted file, resulting in an application crash\nand denial of service. (CVE-2023-3428)\nThis security flaw ouccers as an undefined behaviors of casting double\nto size_t in svg, mvg and other coders (recurring bugs of\nCVE-2022-32546). (CVE-2023-34151)\n","status":"published","published":"2024-03-15T22:51:55Z","modified":"2026-04-16T04:42:53.503642116Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13030-1","title":"ImageMagick-7.1.1.12-1.1 on GA media","description":"These are all security issues fixed in the ImageMagick-7.1.1.12-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:06:27.696369Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"USN-6200-1","title":"imagemagick vulnerabilities","description":"It was discovered that ImageMagick incorrectly handled the \"-authenticate\"\noption for password-protected PDF files. An attacker could possibly use\nthis issue to inject additional shell commands and perform arbitrary code\nexecution. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-29599)\n\nIt was discovered that ImageMagick incorrectly handled certain values\nwhen processing PDF files. If a user or automated system using ImageMagick\nwere tricked into opening a specially crafted PDF file, an attacker could\nexploit this to cause a denial of service. This issue only affected Ubuntu\n20.04 LTS. (CVE-2021-20224)\n\nZhang Xiaohui discovered that ImageMagick incorrectly handled certain\nvalues when processing image data. If a user or automated system using\nImageMagick were tricked into opening a specially crafted image, an\nattacker could exploit this to cause a denial of service. This issue only\naffected Ubuntu 20.04 LTS. (CVE-2021-20241, CVE-2021-20243)\n\nIt was discovered that ImageMagick incorrectly handled certain values\nwhen processing visual effects based image files. By tricking a user into\nopening a specially crafted image file, an attacker could crash the\napplication causing a denial of service. This issue only affected Ubuntu\n20.04 LTS. (CVE-2021-20244, CVE-2021-20309)\n\nIt was discovered that ImageMagick incorrectly handled certain values\nwhen performing resampling operations. By tricking a user into opening\na specially crafted image file, an attacker could crash the application\ncausing a denial of service. This issue only affected Ubuntu 20.04 LTS.\n(CVE-2021-20246)\n\nIt was discovered that ImageMagick incorrectly handled certain values\nwhen processing thumbnail image data. By tricking a user into opening\na specially crafted image file, an attacker could crash the application\ncausing a denial of service. This issue only affected Ubuntu 20.04 LTS.\n(CVE-2021-20312)\n\nIt was discovered that ImageMagick incorrectly handled memory cleanup\nwhen performing certain cryptographic operations. Under certain conditions\nsensitive cryptographic information could be disclosed. This issue only\naffected Ubuntu 20.04 LTS. (CVE-2021-20313)\n\nIt was discovered that ImageMagick did not use the correct rights when\nspecifically excluded by a module policy. An attacker could use this issue\nto read and write certain restricted files. This issue only affected Ubuntu\n20.04 LTS. (CVE-2021-39212)\n\nIt was discovered that ImageMagick incorrectly handled memory under certain\ncircumstances. If a user were tricked into opening a specially crafted\nimage file, an attacker could possibly exploit this issue to cause a denial\nof service or other unspecified impact. This issue only affected Ubuntu\n20.04 LTS. (CVE-2022-28463, CVE-2022-32545, CVE-2022-32546, CVE-2022-32547)\n\nIt was discovered that ImageMagick incorrectly handled memory under certain\ncircumstances. If a user were tricked into opening a specially crafted\nimage file, an attacker could possibly exploit this issue to cause a denial\nof service or other unspecified impact. This issue only affected Ubuntu\n22.04 LTS, Ubuntu 22.10, and Ubuntu 23.04. (CVE-2021-3610, CVE-2023-1906,\nCVE-2023-3428)\n\nIt was discovered that ImageMagick incorrectly handled certain values\nwhen processing specially crafted SVG files. By tricking a user into\nopening a specially crafted SVG file, an attacker could crash the\napplication causing a denial of service. This issue only affected Ubuntu\n20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 22.10, and Ubuntu 23.04. (CVE-2023-1289)\n\nIt was discovered that ImageMagick incorrectly handled memory under certain\ncircumstances. If a user were tricked into opening a specially crafted\ntiff file, an attacker could possibly exploit this issue to cause a denial\nof service or other unspecified impact. This issue only affected Ubuntu\n22.04 LTS, Ubuntu 22.10, and Ubuntu 23.04. (CVE-2023-3195)\n\nIt was discovered that ImageMagick incorrectly handled memory under certain\ncircumstances. If a user were tricked into opening a specially crafted\nimage file, an attacker could possibly exploit this issue to cause a denial\nof service or other unspecified impact. (CVE-2023-34151)\n","status":"published","published":"2023-07-04T09:23:39Z","modified":"2026-06-25T13:31:04.436561188Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}