ImageMagick

Multiple vulnerabilities in ImageMagick, including CVE-2022-44267 and CVE-2022-44268, allow attackers to trigger denial-of-service, bypass security restrictions, or perform unauthorized disclosure of sensitive information via malformed image files.

A remote, anonymous attacker can exploit multiple vulnerabilities in ImageMagick to cause a denial of service condition, disclose information, and bypass security mechanisms.

A heap buffer over-write vulnerability exists in ImageMagick's IPL decoder when processing multiple images of different dimensions, affecting Magick.NET packages prior to version 14.13.1 and potentially leading to arbitrary code execution.

A local attacker can exploit multiple vulnerabilities in ImageMagick to perform a denial of service attack or affect confidentiality, availability, and integrity.