ImageMagick (SUSE:Linux Enterprise Module for Desktop Applications 15 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Desktop Applications 15 SP5 package ImageMagick, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2023-34153 — CVSS 7.8 (high): A vulnerability was found in ImageMagick. This security flaw causes a shell command injection vulnerability via video:vsync or…
• CVE-2023-5341 — CVSS 6.2 (medium): A heap use-after-free flaw was found in coders/bmp.c in ImageMagick.
• CVE-2023-34151 — CVSS 5.5 (medium): A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and…
• CVE-2023-34474 — CVSS 5.5 (medium): A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could…