PT-2025-52258

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.1-14 Description ImageMagick, a free and open-source software used for editing and manipulating digital images, experiences crashes when processing a specially crafted TIFF file. Recommendations Update to...

CVE-2020-20718

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the savefile parameter...

CVE-2020-20718

File Upload vulnerability in PluckCMS v.4.7.10 dev versions allows a remote attacker to execute arbitrary code via a crafted image file to the the savefile parameter...

ImageMagick 缓冲区错误漏洞

ImageMagick is a set of open-source image processing software from the American company ImageMagick. The software can read, convert, or write images in a variety of formats. ImageMagick suffers from a security vulnerability that stems from a stack-based buffer overflow problem found in...

libtiff: out-of-bounds read in tiffcp in tools/tiffcp.c

A flaw was found in tiffcp, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the tiffcp function in tools/tiffcp.c, resulting in a denial of service and limited information disclosure...

The vulnerability of the PDF-XChange PDF document viewing and editing program lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created TIFF file...

MGASA-2023-0144 Updated libheif packages fix security vulnerability

Vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call. CVE-2023-0996...

The vulnerability of the Exiv2 metadata management library commands, related to executing a loop with an unreachable exit condition, allows a hacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library commands is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created image file...

The vulnerability of the Exiv2 metadata management library, related to reading beyond the allowed buffer data limits, allows a hacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through the use of a specially created image file...

The vulnerability of the Exiv2 metadata management library commands, related to executing a loop with an unreachable exit condition, allows a hacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library commands is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created image file...

CVE-2023-24734

An arbitrary file upload vulnerability in the cameraupload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file...

CVE-2023-24734

An arbitrary file upload vulnerability in the cameraupload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file...

Denial Of Service (DoS)

libheif.so is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause a buffer overflow during a memcpy call with a crafted image file, causing the application to crash...

Buffer overflow

There is a vulnerability in the strided image data parsing code in the emscripten wrapper for libheif. An attacker could exploit this through a crafted image file to cause a buffer overflow in linear memory during a memcpy call...

K68785753: ImageMagick vulnerability CVE-2015-8898

Security Advisory Description The WriteImages function in magick/constitute.c in ImageMagick before 6.9.2-4 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted image file. CVE-2015-8898 Impact BIG-IP systems that use a WebAcceleration profile configured wit...

K23731034: PHP & libGD vulnerability CVE-2016-10167

Security Advisory Description The gdImageCreateFromGd2Ctx function in gdgd2.c in the GD Graphics Library aka libgd before 2.2.4 allows remote attackers to cause a denial of service application crash via a crafted image file. CVE-2016-10167 Impact There is no impact; F5 products are not affected b...

LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724 allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources the fix is available with commit 33aee127.

...

SUSE CVE-2005-0762

Heap-based buffer overflow in the SGI parser in ImageMagick before 6.0 allows remote attackers to execute arbitrary code via a crafted SGI image file...

SUSE CVE-2007-5268

pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use 1 logical instead of bitwise operations and 2 incorrect comparisons, which might allow remote attackers to cause a denial of service crash via a crafted PNG image...

SUSE CVE-2008-5187

The load function in the XPM loader for imlib2 1.4.2, and possibly other versions, allows attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted XPM file that triggers a "pointer arithmetic error" and a heap-based buffer overflow, a different vulnerability...