graphicsmagick:coder_JNG_fuzzer: Use-of-uninitialized-value in png_handle_eXIf

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6603240378073088 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

Ubuntu 16.04 ESM : ImageMagick vulnerabilities (USN-5335-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5335-1 advisory. It was discovered that ImageMagick incorrectly handled certain values when processing XPM image data or large images. If a user or automated system using...

OESA-2022-1579 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

graphicsmagick:coder_SVG_fuzzer: Use-of-uninitialized-value in xmlParseInternalSubset

Detailed Report: https://oss-fuzz.com/testcase?key=5033510363070464 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderSVGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: xmlParseInternalSubset...

graphicsmagick:coder_DCM_fuzzer: Use-of-uninitialized-value in jp2_box_get

Detailed Report: https://oss-fuzz.com/testcase?key=5681149173694464 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderDCMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jp2boxget jp2decode...

graphicsmagick:coder_MSL_fuzzer: Global-buffer-overflow in xmlParsePI

Detailed Report: https://oss-fuzz.com/testcase?key=6514436804837376 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderMSLfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x000001a45c02 Crash State: xmlParseP...

RUSTSEC-2022-0007 A malicious coder can get unsound access to TCell or TLCell memory

This is impossible to do by accident, but by carefully constructing marker types to be covariant, a malicious coder can cheat the singleton check in TCellOwner and TLCellOwner, giving unsound access to cell memory. This could take the form of getting two mutable references to the same memory, or ...

A malicious coder can get unsound access to TCell or TLCell memory

This is impossible to do by accident, but by carefully constructing marker types to be covariant, a malicious coder can cheat the singleton check in TCellOwner and TLCellOwner, giving unsound access to cell memory. This could take the form of getting two mutable references to the same memory, or ...

graphicsmagick:coder_P7_fuzzer: Use-of-uninitialized-value in WritePNMImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5008645446828032 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderP7fuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

graphicsmagick:coder_PCT_fuzzer: Heap-buffer-overflow in ReadBlob

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5102770225545216 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPCTfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow WRIT...

CVE-2021-25053

The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include arbitrary file with PHP extension as well as with data:// or http:// protocols, thus leading to CSRF RCE...

CVE-2021-25053

The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include arbitrary file with PHP extension as well as with data:// or http:// protocols, thus leading to CSRF RCE...

CVE-2021-25053 WP Coder < 2.5.2 - RFI leading to RCE via CSRF

The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include arbitrary file with PHP extension as well as with data:// or http:// protocols, thus leading to CSRF RCE...

CVE-2021-25053

The CVE-2021-25053 entry concerns the WordPress WP Coder plugin prior to version 2.5.2. According to multiple sources in the connected documents, the wow-company admin menu page allows include() of arbitrary files with a PHP extension (including data:// or http://), enabling CSRF-facilitated remo...

graphicsmagick:coder_PNM_fuzzer: Use-of-uninitialized-value in SyncImageCallBack

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5856373341028352 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPNMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

CVE-2021-25053: Cross-Site Request Forgery (CSRF)

The WP Coder WordPress plugin before 2.5.2 within the wow-company admin menu page allows to include arbitrary file with PHP extension as well as with data:// or http:// protocols, thus leading to CSRF RCE...

PT-2022-9609

Name of the Vulnerable Software and Affected Versions WP Coder WordPress plugin versions prior to 2.5.2 Description The issue allows for the inclusion of arbitrary files with PHP extension, as well as files using data:// or http:// protocols, within the wow-company admin menu page. This can lead ...

graphicsmagick:coder_MAT_fuzzer: Use-of-uninitialized-value in ReadMATImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6478399959334912 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_JNG_fuzzer: Use-of-uninitialized-value in read_user_chunk_callback

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5167930105528320 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_SVG_fuzzer: Heap-use-after-free in xmlParseInternalSubset

Detailed Report: https://oss-fuzz.com/testcase?key=4943095205068800 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderSVGfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60b00003e058 Crash State:...