SUSE CVE-2019-11505

In GraphicsMagick from version 1.3.8 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WritePDBImage of coders/pdb.c, which allows an attacker to cause a denial of service or possibly have unspecified other impact via a crafted image file. This is related to...

SUSE CVE-2019-11506

In GraphicsMagick from version 1.3.30 to 1.4 snapshot-20190403 Q8, there is a heap-based buffer overflow in the function WriteMATLABImage of coders/mat.c, which allows an attacker to cause a denial of service or possibly have unspecified other impact via a crafted image file. This is related to...

SUSE CVE-2019-12921

In GraphicsMagick before 1.3.32, the text filename component allows remote attackers to read arbitrary files via a crafted image because of TranslateTextEx for SVG...

SUSE CVE-2019-19950

In GraphicsMagick 1.4 snapshot-20190403 Q8, there is a use-after-free in ThrowException and ThrowLoggedException of magick/error.c...

SUSE CVE-2019-19953

In GraphicsMagick 1.4 snapshot-20191208 Q8, there is a heap-based buffer over-read in the function EncodeImage of coders/pict.c...

SUSE CVE-2019-19951

In GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c...

SUSE CVE-2020-10938

GraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c...

SUSE CVE-2020-12672

GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c...

SUSE CVE-2022-1270

In GraphicsMagick, a heap buffer overflow was found when parsing MIFF...

Ubuntu: Security Advisory (USN-5190-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

graphicsmagick:coder_WPG_fuzzer: Use-of-uninitialized-value in GrayscalePseudoClassImage

Detailed Report: https://oss-fuzz.com/testcase?key=5231345528078336 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderWPGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: GrayscalePseudoClassImage...

openSUSE 15: GraphicsMagick / GraphicsMagick-devel / libGraphicsMagick++-Q16-12 / etc (SUSE-SU-2022:1274-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:1274-1 advisory. - CVE-2022-1270: Fixed a heap buffer overflow when parsing MIFF bsc1198351. Tenable has extracted the preceding description block directly from the SUSE...

graphicsmagick:coder_SUN_fuzzer: Heap-buffer-overflow in ReadSUNImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6348811671044096 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderSUNfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address...

graphicsmagick:coder_PTIF_fuzzer: Use-of-uninitialized-value in AccumulateRGBA

Detailed Report: https://oss-fuzz.com/testcase?key=5601008342663168 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: AccumulateRGBA...

graphicsmagick:coder_PTIF_fuzzer: Use-of-uninitialized-value in ImportViewPixelArea

Detailed Report: https://oss-fuzz.com/testcase?key=5459994617446400 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ImportViewPixelArea...

graphicsmagick:coder_BIGTIFF_fuzzer: Use-of-uninitialized-value in AssociateAlphaRegion

Detailed Report: https://oss-fuzz.com/testcase?key=6658862713536512 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderBIGTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: AssociateAlphaRegion...

graphicsmagick:coder_PTIF_fuzzer: Use-of-uninitialized-value in VerticalFilter

Detailed Report: https://oss-fuzz.com/testcase?key=6722491079065600 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPTIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: VerticalFilter ResizeImage...

graphicsmagick:coder_RAS_fuzzer: Heap-buffer-overflow in ReadSUNImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4885054235213824 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderRASfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...

Mageia: Security Advisory (MGASA-2022-0449)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

graphicsmagick:coder_TIFF_fuzzer: Use-of-uninitialized-value in AccumulateRGB

Detailed Report: https://oss-fuzz.com/testcase?key=4862840762925056 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: AccumulateRGB...