graphicsmagick:coder_MAT_fuzzer: Use-of-uninitialized-value in IsGrayImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5147483288240128 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMATfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_CALS_fuzzer: Use-of-uninitialized-value in Fax4Decode

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4780325702074368 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderCALSfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

PT-2021-7418 · Unknown +5 · Graphicsmagick +5

Name of the Vulnerable Software and Affected Versions: GraphicsMagick affected versions not specified Description: The issue is related to a heap buffer overflow when parsing MIFF, which can be exploited to impact the confidentiality, integrity, and availability of protected information. This is...

graphicsmagick:coder_WPG_fuzzer: Use-of-uninitialized-value in DestroyThreadViewSet

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5232822816210944 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderWPGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_WPG_fuzzer: Heap-double-free in MagickFree

Detailed Report: https://oss-fuzz.com/testcase?key=4680255596003328 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderWPGfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-double-free Crash Address: 0xf4f0ccb0 Crash State: MagickFree ReadMETAIma...

Updated graphicsmagick packages fix security vulnerability

GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c CVE-2020-12672...

MGASA-2020-0472 Updated graphicsmagick packages fix security vulnerability

GraphicsMagick through 1.3.35 has a heap-based buffer overflow in ReadMNGImage in coders/png.c CVE-2020-12672...

graphicsmagick:coder_MPC_fuzzer: Heap-buffer-overflow in _MagickReallocateResourceLimitedMemory

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5124498374393856 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMPCfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ Cra...

graphicsmagick:coder_JNG_fuzzer: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6222494231035904 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00001440 Crash State: NULL Sanitizer: address...

FreeBSD : Gitlab -- Multiple vulnerabilities (5d5e5cda-38e6-11eb-bbbf-001b217b3468)

Gitlab reports : XSS in Zoom Meeting URL Limited Information Disclosure in Private Profile User email exposed via GraphQL endpoint Group and project membership potentially exposed via GraphQL Search terms logged in search parameter in rails logs Un-authorised access to feature flag user list A...

Denial Of Service (DoS)

GraphicsMagick is vulnerable to denial of service attacks. Heap-based buffer overflow in ReadMNGImage in coders/png.c causes system hang...

graphicsmagick:coder_JPG_fuzzer: Use-of-uninitialized-value in decompress_smooth_data

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5641886991384576 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJPGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_JNX_fuzzer: Use-of-uninitialized-value in decompress_smooth_data

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5886460875767808 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNXfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_JPG_fuzzer: Heap-buffer-overflow in decompress_smooth_data

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5765930260627456 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJPGfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 2...

Arbitrary Code Execution

graphicsmagick is vulnerable to Arbitrary Code Execution. The vulnerability exists as the ReadMNGImage function in coders/png.c mishandles large MNG images, leading to an invalid memory read in the SetImageColorCallBack function in magick/image.c...

Arbitrary Code Execution

GraphicsMagick is vulnerable to arbitrary code execution. A segmentation violation in the WriteMAPImage function in coders/map.c when processing a non-colormapped image allows an attacker to execute arbitrary code on the host OS. This vulnerability is different from CVE-2017-11642...

Information Disclosure

graphicsmagick is vulnerablet o information disclosure. The DescribeImage function of the magick/describe.c file contains a heap-based buffer over-read bug...

Buffer Overflow

GraphicsMagick has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12...

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a NULL pointer dereference in the WritePCLImage function in coders/pcl.c during writes of monochrome images...

Denial Of Service (DoS)

graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists through a NULL pointer dereference vulnerability in the function ReadCINEONImage in coders/cineon.c...