CVE-2021-1754

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution...

PT-2021-4595 · Unknown +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.11 ImageMagick versions prior to 6.9.12 Description: A flaw was found in ImageMagick where a division by zero in WaveImage of MagickCore/visual-effects.c may trigger undefined behavior via a crafted image fil...

The vulnerability of the ImageIO component in operating systems such as tvOS, iOS, iPadOS, watchOS, and the iCloud service for Windows operating systems allows attackers to execute arbitrary code.

The vulnerability of the ImageIO component in operating systems such as tvOS, iOS, iPadOS, watchOS, and iCloud for Windows operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Apple ImageIO 资源管理错误漏洞

Apple ImageIO is an Apple component necessary for parsing and writing image data in IOS mobile devices. Apple ImageIO suffers from a resource management error vulnerability that stems from a boundary condition when processing image files in the curl implementation of the ImageIO component for...

Apple ImageIO Security Vulnerability

Apple ImageIO is an Apple Inc. component necessary for parsing and writing image data in IOS mobile devices. A security vulnerability exists in Apple ImageIO that stems from insufficient validation of user-supplied input when processing image files in the ImageIO component in macOS. A remote...

Apple macOS Security Breach

Apple ImageIO is an Apple Inc. component necessary for parsing and writing image data in IOS mobile devices. A security vulnerability exists in Apple ImageIO that stems from insufficient validation of user-supplied input when processing image files in the ImageIO component in macOS. A remote...

Apple ImageIO Buffer Error Vulnerability

Apple ImageIO is an Apple Inc. component necessary for parsing and writing image data in IOS mobile devices. Apple ImageIO suffers from a buffer error vulnerability that stems from a boundary error when processing image files within the ImageIO component in macOS. A remote attacker could create a...

PYSEC-2021-71

In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled...

The vulnerability of the Pillow image processing library, related to unlimited resource distribution, allows a hacker to cause a service failure.

The vulnerability of the Pillow image processing library is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by creating specially crafted image files...

Apple ImageIO Buffer Error Vulnerability

Apple ImageIO is an Apple Inc. component necessary for parsing and writing image data in IOS mobile devices. A security vulnerability exists in Apple ImageIO, where processing of maliciously crafted images may result in arbitrary code execution. The following products and versions are affected:...

Apple ImageIO Buffer Error Vulnerability

Apple ImageIO is an Apple Inc. component necessary for parsing and writing image data in IOS mobile devices. A security vulnerability exists in Apple ImageIO, where processing of maliciously crafted images may result in arbitrary code execution. The following products and versions are affected:...

Apple macOS Buffer Error Vulnerability

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS where processing of maliciously crafted images may result in arbitrary code execution. The following products and versions are affected: macOS Mojave 10.14.6,...

Apple ImageIO Buffer Error Vulnerability

Apple ImageIO is an Apple Inc. component necessary for parsing and writing image data in IOS mobile devices. A security vulnerability exists in Apple ImageIO, where processing of maliciously crafted images may result in heap corruption. The following products and versions are affected: macOS Moja...

ImageMagick Studio ImageMagick 输入验证错误漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems...

cryptsetup: Out-of-bounds write when validating segments

A flaw was found in the way cryptsetup parses encrypted images with invalid segments. This flaw allows a local attacker to crash an application compiled with cryptsetup, or in some cases, cause arbitrary code execution when parsing specially crafted encrypted images. The highest threat from this...

CVE-2020-9875

An integer overflow was addressed through improved input validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead t...

CVE-2020-17022

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted ima...

USN-4549-1 imagemagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain specially crafted image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or other unspecified impact. CVE-2019-1994...

Heap Overflow Vulnerability in Light and Shadow Magic Hand of Shenzhen Xunlei.com Culture Limited (CNVD-2020-58817)

LightShadow Magic Hand is a software for improving and enhancing image quality and effect processing. Shenzhen Xunlei.com Culture Co., Ltd LightShadow Magic Hand has a heap overflow vulnerability that allows an attacker to construct a special picture to cause the software to crash, which can also...

Mozilla Rust rand_core number handling error vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A number handling error vulnerability exists in Mozilla Rust versions prior to 0.4.2 in randcore, which arises from an error in the handling of bytes converted to integers, and can be exploited to execute...