ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 have a type confusion vulnerability in the INFO, JSON, and YAML encoders. This flaw occurs when an internal method receives a pointer of an unexpected type during image writing in a compressed format. Exploitation can cause the process to crash with SIGABRT or SIGSEGV, resulting in denial of service.
ImageMagick versions from 7.1.0-21 up to but not including 7.1.2-32 contain a heap buffer over-read vulnerability in the handling of the -fx option. This flaw allows a crafted -fx expression to read beyond the allocated heap buffer, potentially disclosing limited memory contents. The vulnerability has a medium severity rating with a CVSS score of 4.4. No known exploits are reported in the wild. A fix is available in version 7.1.2-32.
ImageMagick versions from 7.1.0-20 up to but not including 7.1.2-32 contain a use after free vulnerability in the -fx option. This flaw occurs when a memory allocation fails during processing of crafted -fx expressions, potentially leading to crashes or memory corruption. The vulnerability has a low severity score and requires local access with high attack complexity and low privileges. There is no indication of known exploits in the wild or a vendor-provided patch status.
Open WebUI versions from 0.11.1 up to but not including 0.11.4 contain an authorization bypass vulnerability in the OAuth token exchange endpoint. The flaw arises because the endpoint reads role claims only from the provider's userinfo response and retains the user's existing role if no roles claim is found, ignoring roles present only in the ID token. This allows users with linked accounts whose identity provider roles no longer meet the OAuth role policy to send a valid provider access token to the token exchange endpoint and obtain a session that retains their previous, potentially elevated, role.
ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 have a race condition due to improper synchronization when accessing the security policy. This can lead to a heap buffer overwrite and cause the application to crash, resulting in a denial of service. The vulnerability requires concurrent access to the security policy by multiple threads. The CVSS score is low, reflecting limited impact as it only causes denial of service without confidentiality or integrity loss.
ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 contain a code injection vulnerability in the MVG decoder when using a PostScript renderer. This vulnerability allows attackers to supply a crafted MVG file that injects code into the PostScript rendering path, potentially causing limited integrity and availability impacts. The CVSS score is 4.8, indicating medium severity.
ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 have a flaw in the JNG decoder where temporary files are not properly cleaned up after processing crafted input. This can lead to repeated leakage of temporary files, consuming disk space and potentially degrading system availability.
ImageMagick versions before 7.1.2-32 have a policy bypass vulnerability in the -script operation caused by missing checks on file descriptor handling. This flaw allows attackers with limited privileges to close file descriptors not opened by the current operation, potentially circumventing security policies. The vulnerability has a medium severity rating and a CVSS score of 3.3. No explicit patch or remediation details are provided in the available data.
A memory leak vulnerability exists in ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 in the wavelet-denoise operation. This flaw causes allocated memory to not be released when a required resource cannot be acquired. An attacker can exploit this by repeatedly triggering the wavelet-denoise process under resource-constrained conditions, leading to memory exhaustion and degraded service availability.
ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 contain an information disclosure vulnerability in the JPEG decoder. This flaw allows an attacker to supply a crafted JPEG file that causes the decoder to read and disclose uninitialized memory contents. The vulnerability has a medium severity rating with a CVSS score of 5.3.
ImageMagick versions from 7.1.1-31 up to but not including 7.1.2-32 contain a NULL pointer dereference vulnerability in the PostScript decoder. This flaw is triggered when a policy limit is reached during processing of a crafted PostScript file, leading to application crash and denial of service. The vulnerability has a medium severity rating with a CVSS score of 3.7.
ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 have a use after free vulnerability in the PDF writer component when processing CMYK images with JPEG2000 compression. This flaw can lead to memory reuse of freed memory, potentially causing the process to crash. The vulnerability has a medium severity score and does not impact confidentiality or integrity, only availability.
ImageMagick versions prior to 7.1.2-32 have a time-of-check time-of-use (TOCTOU) symlink race vulnerability. This flaw allows attackers to bypass the path security policy by swapping a checked path with a symlink during the execution of a magick script, potentially enabling unauthorized file reads. The vulnerability has a low CVSS score of 2.5, indicating limited impact and requiring local low-privilege access with high attack complexity. No known exploits are reported in the wild, and no patch information is provided in the source data.
ImageMagick versions from 7.1.2-30 up to but not including 7.1.2-32 contain a use after free vulnerability in the WBINFO decoder. This occurs when a memory allocation fails during image decoding, potentially causing the application to crash due to reuse of freed memory. The vulnerability has a CVSS score of 3.7, indicating a medium severity impact focused on availability.
ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 have an information disclosure vulnerability in the PostScript decoder. This flaw allows an attacker to supply a crafted PostScript file that causes the decoder to allocate a buffer one byte longer than the decoded data, exposing a single uninitialized byte of memory. The vulnerability has a medium severity rating with a CVSS score of 5.3.
ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 have a stack overflow vulnerability in the MSL decoder due to an incorrect depth check that fails to limit recursion. This flaw allows crafted MSL images to exhaust the stack, causing the process to crash and resulting in a denial of service. There is no impact on confidentiality or integrity. The vulnerability has a medium severity rating with a CVSS score of 5.3.
ImageMagick versions before 7.1.2-32 have a memory leak vulnerability in the -process option. This flaw allows attackers with local privileges to cause unreleased memory allocations by supplying crafted arguments. Repeated exploitation can gradually exhaust system memory, leading to degraded service availability. The vulnerability has a medium severity rating with a CVSS score of 3.3. No known exploits are reported in the wild, and no official patch information is provided in the input data.
ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 contain a vulnerability in the MVG decoder involving uncontrolled recursion that can exhaust the program stack. This flaw can be triggered by an attacker controlling a file name processed by ImageMagick, leading to a stack overflow and process crash, resulting in denial of service. The vulnerability has a medium severity with a CVSS score of 3.7.
ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 have a memory leak vulnerability in the GIF encoder. This occurs because allocated memory is not released when color quantization fails during GIF encoding. An attacker can exploit this by supplying images that cause quantization failure, leading to memory leaks and potential degradation of system availability.
ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 have a vulnerability in the TGA image decoder that causes an uninitialized memory read. This flaw allows attackers to craft malicious TGA images that, when processed, can disclose contents of uninitialized memory from the ImageMagick process. The vulnerability has a medium severity rating with a CVSS score of 5.3.