graphicsmagick:coder_JNG_fuzzer: Use-of-uninitialized-value in inflate

Detailed Report: https://oss-fuzz.com/testcase?key=5065092622843904 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: inflate pngreadIDATdata...

graphicsmagick:coder_JNG_fuzzer: Use-of-uninitialized-value in png_colorspace_set_sRGB

Detailed Report: https://oss-fuzz.com/testcase?key=5155496131166208 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pngcolorspacesetsRGB...

graphicsmagick:coder_JNG_fuzzer: Use-of-uninitialized-value in png_handle_zTXt

Detailed Report: https://oss-fuzz.com/testcase?key=5804997963546624 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pnghandlezTXt pngreadinfo...

graphicsmagick:coder_J2C_fuzzer: Segv on unknown address in jpc_pchglist_destroy

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6713657107546112 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJ2Cfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Segv on unknown address Crash...

graphicsmagick:enhance_fuzzer: Use-of-uninitialized-value in jas_strtok

Detailed Report: https://oss-fuzz.com/testcase?key=5488201695887360 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: enhancefuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jasstrtok jasinitcodecs...

graphicsmagick:coder_DCM_fuzzer: Use-of-uninitialized-value in jas_strtok

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5264737928085504 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderDCMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

The vulnerability of the command-line application for processing GraphicsMagick image files relates to the disclosure of information, allowing an attacker to access confidential data.

The vulnerability of the command-line application for processing GraphicsMagick image files is related to information disclosure. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

The vulnerability of the HuffmanDecodeImage function in the command-line applications for processing GraphicsMagick image files, related to integer overflow, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the HuffmanDecodeImage function in the command-line applications for processing GraphicsMagick image files is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and caus...

graphicsmagick:coder_BIGTIFF_fuzzer: Use-of-uninitialized-value in DisassociateAlphaRegion

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6151802516013056 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderBIGTIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-valu...

MGASA-2021-0286 Updated graphicsmagick packages fix security vulnerabilities

Updated graphicsmagick packages fix security vulnerabilities: The graphicsmagick package has been updated to version 1.3.36, fixing several security issues and other bugs. See the upstream NEWS file for details...

Updated graphicsmagick packages fix security vulnerabilities

Updated graphicsmagick packages fix security vulnerabilities: The graphicsmagick package has been updated to version 1.3.36, fixing several security issues and other bugs. See the upstream NEWS file for details...

PT-2021-30853

Name of the Vulnerable Software and Affected Versions graphicsmagick versions prior to 1.3.36 Description The issue concerns several security problems and other bugs in the graphicsmagick package. These issues have been fixed in version 1.3.36. Recommendations For versions prior to 1.3.36, update...

graphicsmagick:coder_MSL_fuzzer: Use-of-uninitialized-value in MSLEndElement

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5739753327689728 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMSLfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_MAT_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5007774007296000 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMATfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00001440 Crash State: NULL Sanitizer: address...

graphicsmagick:coder_DCM_fuzzer: Heap-buffer-overflow in decode_mcu

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4604410450804736 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderDCMfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...

graphicsmagick:coder_MSL_fuzzer: Heap-use-after-free in ProcessMSLScript

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5813907387187200 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderMSLfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address:...

graphicsmagick:coder_DCM_fuzzer: Heap-buffer-overflow in DCM_SetupRescaleMap

Detailed Report: https://oss-fuzz.com/testcase?key=4993934234353664 Project: graphicsmagick Fuzzing Engine: honggfuzz Fuzz Target: coderDCMfuzzer Job Type: honggfuzzasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x7f3c4339a820 Crash State:...

graphicsmagick:coder_JPC_fuzzer: Use-of-uninitialized-value in WriteJP2Image

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6255607318446080 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJPCfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_MNG_fuzzer: Heap-buffer-overflow in ReadMNGImage

Detailed Report: https://oss-fuzz.com/testcase?key=4580215097524224 Project: graphicsmagick Fuzzing Engine: afl Fuzz Target: coderMNGfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x6060000000be Crash State: ReadMNGImage ReadImage...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. An integer overflow and heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c allows an attacker to execute arbitrary code on the host OS...