https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 11:34:53 +0000 https://vulnerability.circl.lu/vuln/cve-2019-7175 <p>In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.</p> <p>In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c.</p> https://vulnerability.circl.lu/vuln/cve-2019-7175 https://vulnerability.circl.lu/vuln/usn-4034-1 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: imagemagick, Ubuntu:18.04:LTS: imagemagick</p> <p>It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.</p> <p>Due to a large number of issues discovered in GhostScript that prevent it from being used by ImageMagick safely, the update for Ubuntu 18.10 and Ubuntu 19.04 includes a default policy change that disables support for the Postscript and PDF formats in ImageMagick. This policy can be overridden if necessary by using an alternate ImageMagick policy configuration.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: imagemagick, Ubuntu:18.04:LTS: imagemagick</p> <p>It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.</p> <p>Due to a large number of issues discovered in GhostScript that prevent it from being used by ImageMagick safely, the update for Ubuntu 18.10 and Ubuntu 19.04 includes a default policy change that disables support for the Postscript and PDF formats in ImageMagick. This policy can be overridden if necessary by using an alternate ImageMagick policy configuration.</p> https://vulnerability.circl.lu/vuln/usn-4034-1