2719 matches found
CVE-2017-18231
An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...
CVE-2017-18229
An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile...
CVE-2017-18231
An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...
CVE-2017-18230
An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file...
CVE-2017-18229
GraphicsMagick 1.3.26 is affected by an allocation failure in ReadTIFFImage (coders/tiff.c) that allows DoS via a crafted TIFF file because allocations for scanlines/strips/tiles aren’t properly bounded by file size. Public advisories (e.g., Debian DSA-4321-1) note patches/versions (e.g., 1.3.30+...
CVE-2017-18230
An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file...
GraphicsMagick null pointer dereference vulnerability (CNVD-2018-07044)
GraphicsMagick has been called the Swiss Army Knife of image processing. The short and compact code provides a robust and efficient collection of tools and libraries to handle reading, writing and manipulating images, supporting over 88 image formats, including the important DPX, GIF, JPEG,...
GraphicsMagick Assignment Failure Vulnerability
GraphicsMagick has been called the Swiss Army Knife of image processing. The short and compact code provides a robust and efficient collection of tools and libraries to handle reading, writing and manipulating images, supporting over 88 image formats, including the important DPX, GIF, JPEG,...
GraphicsMagick null pointer dereference vulnerability (CNVD-2018-07043)
GraphicsMagick has been called the Swiss Army Knife of image processing. The short and compact code provides a robust and efficient collection of tools and libraries to handle reading, writing and manipulating images, supporting over 88 image formats, including the important DPX, GIF, JPEG,...
graphicsmagick/coder_PCT_fuzzer: Heap-use-after-free in GetLocaleExceptionMessage
Detailed report: https://oss-fuzz.com/testcase?key=5966407209582592 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderPCTfuzzer Fuzz target binary: coderPCTfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6250001a71ed Crash Stat...
Amazon Linux AMI : GraphicsMagick (ALAS-2018-966)
Memory information disclosure in DescribeImage function in magick/describe.c GraphicsMagick is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based buffer over-read. The portion of the code containin...
graphicsmagick/coder_PICON_fuzzer: Use-of-uninitialized-value in Dither
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5184380084420608 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPICONfuzzer Fuzz target binary: coderPICONfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type...
GraphicsMagick Denial of Service Vulnerability (CNVD-2018-04994)
GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'ReadOneJNGImage' function and the 'ReadJNGImage' function of the coders/png.c file in GraphicsMagick version 1.3.26. ...
GraphicsMagick 'ReadOnePNGImage' Function Denial of Service Vulnerability
GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'ReadOnePNGImage' function in the coders/png.c file in GraphicsMagick version 1.3.26. An attacker can exploit this...
Design/Logic Flaw
An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large pngpixels array allocation...
DEBIAN-CVE-2017-18220
The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...
UBUNTU-CVE-2017-18220
The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...
CVE-2017-18219
An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large pngpixels array allocation...
UBUNTU-CVE-2017-18219
An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large pngpixels array allocation...
Design/Logic Flaw
The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...