GraphicsMagick null pointer dereference vulnerability (CNVD-2018-07043)

GraphicsMagick has been called the Swiss Army Knife of image processing. The short and compact code provides a robust and efficient collection of tools and libraries to handle reading, writing and manipulating images, supporting over 88 image formats, including the important DPX, GIF, JPEG,...

PT-2018-6758

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.26 Description: A NULL pointer dereference issue was discovered in the function ReadCINEONImage in coders/cineon.c. This allows attackers to cause a denial of service via a crafted file. Recommendations: For...

CVE-2017-18230: NULL Pointer Dereference

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-18229: Allocation of Resources Without Limits or Throttling

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile...

GraphicsMagick null pointer dereference vulnerability (CNVD-2018-07044)

GraphicsMagick has been called the Swiss Army Knife of image processing. The short and compact code provides a robust and efficient collection of tools and libraries to handle reading, writing and manipulating images, supporting over 88 image formats, including the important DPX, GIF, JPEG,...

PT-2018-6759

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.26 Description: A NULL pointer dereference issue was discovered in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file. Recommendations: For...

GraphicsMagick Assignment Failure Vulnerability

GraphicsMagick has been called the Swiss Army Knife of image processing. The short and compact code provides a robust and efficient collection of tools and libraries to handle reading, writing and manipulating images, supporting over 88 image formats, including the important DPX, GIF, JPEG,...

CVE-2017-18231: NULL Pointer Dereference

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...

graphicsmagick/coder_PCT_fuzzer: Heap-use-after-free in GetLocaleExceptionMessage

Detailed report: https://oss-fuzz.com/testcase?key=5966407209582592 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderPCTfuzzer Fuzz target binary: coderPCTfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6250001a71ed Crash Stat...

Amazon Linux AMI : GraphicsMagick (ALAS-2018-966)

Memory information disclosure in DescribeImage function in magick/describe.c GraphicsMagick is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based buffer over-read. The portion of the code containin...

graphicsmagick/coder_PICON_fuzzer: Use-of-uninitialized-value in Dither

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5184380084420608 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPICONfuzzer Fuzz target binary: coderPICONfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type...

GraphicsMagick 'ReadOnePNGImage' Function Denial of Service Vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'ReadOnePNGImage' function in the coders/png.c file in GraphicsMagick version 1.3.26. An attacker can exploit this...

GraphicsMagick Denial of Service Vulnerability (CNVD-2018-04994)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'ReadOneJNGImage' function and the 'ReadJNGImage' function of the coders/png.c file in GraphicsMagick version 1.3.26. ...

Design/Logic Flaw

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large pngpixels array allocation...

UBUNTU-CVE-2017-18220

The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...

UBUNTU-CVE-2017-18219

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large pngpixels array allocation...

CVE-2017-18219

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large pngpixels array allocation...

CVE-2017-18220

The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...

Design/Logic Flaw

The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...

CVE-2017-18219

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large pngpixels array allocation...