graphicsmagick:coder_SVG_fuzzer: Heap-use-after-free in xmlParseInternalSubset

Detailed Report: https://oss-fuzz.com/testcase?key=4943095205068800 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderSVGfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60b00003e058 Crash State:...

WordPress WP Coder plugin <= 2.5.1 - Remote File Inclusion (RFI) leading to Remote Code Execution (RCE) via CSRF vulnerability

Remote File Inclusion RFI leading to Remote Code Execution RCE via CSRF vulnerability discovered by Krzysztof Zając in WordPress WP Coder plugin versions = 2.5.1. Solution Update the WordPress WP Coder plugin to the latest available version at least 2.5.2...

graphicsmagick:coder_JNG_fuzzer: Use-of-uninitialized-value in inflate

Detailed Report: https://oss-fuzz.com/testcase?key=5604800448823296 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: inflate pngreadIDATdata...

graphicsmagick:coder_MAT_fuzzer: Use-of-uninitialized-value in ImportViewPixelArea

Detailed Report: https://oss-fuzz.com/testcase?key=6147169237729280 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ImportViewPixelArea...

ImageMagick coders/webp.c Heap Buffer Overflow DoS

The vulnerability of the coders/webp.c component in the console-based image editing tool ImageMagick is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ImageMagick WriteTHUMBNAILImage Integer Overflow DoS

The vulnerability of the WriteTHUMBNAILImage function in the coders/thumbnail.c file of the console image editing tool ImageMagick is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created image file...

graphicsmagick:coder_JNG_fuzzer: Use-of-uninitialized-value in read_user_chunk_callback

Detailed Report: https://oss-fuzz.com/testcase?key=5660520292679680 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: readuserchunkcallback...

graphicsmagick:coder_JNG_fuzzer: Use-of-uninitialized-value in png_colorspace_set_sRGB

Detailed Report: https://oss-fuzz.com/testcase?key=5155496131166208 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pngcolorspacesetsRGB...

REvil’s Back; Coder Fat-Fingered Away Its Decryptor Key?

UPDATE The REvil ransomware gang’s tentacles shot out yet again last week, with the ransomware gang’s servers back online, a fresh victim listed on its site, ransomware payments back up and flowing, and an explanation of why it took a two-month hiatus. A purported REvil representative also...

DEBIAN-CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

Design/Logic Flaw

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

UBUNTU-CVE-2021-39212

ImageMagick is free software delivered as a ready-to-run binary distribution or as source code that you may use, copy, modify, and distribute in both open and proprietary applications. In affected versions and in certain cases, Postscript files could be read and written when specifically excluded...

PT-2021-7869 · Unknown +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.12-22 ImageMagick versions prior to 7.1.0-7 Description: The issue is related to the handling of Postscript files in ImageMagick, where these files could be read and written even when excluded by a module...

graphicsmagick:coder_DCM_fuzzer: Use-of-uninitialized-value in jas_strtok

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5264737928085504 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderDCMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

ImageMagick ReadBMPImage Infinite Loop DoS

The vulnerability of the ReadBMPImage function in the coders/bmp.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created BMP file...

ImageMagick DecodeLabImage EncodeLabImage TIFF DoS

The vulnerability of the DecodeLabImage and EncodeLabImage functions in the ImageMagick console graphics editor’s coders/tiff.c component is related to excessive iteration. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created tiff file...

ImageMagick coders/bmp.c Integer Overflow DoS

The vulnerability of the coders/bmp.c component in the console-based graphic editor ImageMagick is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created file...

graphicsmagick:coder_BIGTIFF_fuzzer: Use-of-uninitialized-value in DisassociateAlphaRegion

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6151802516013056 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderBIGTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-valu...

ImageMagick ReadOneJNGImage Null Pointer DoS

The vulnerability of the ReadOneJNGImage function in the coders/png.c component of the ImageMagick console graphics editor involves the use of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure...