imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void transform_idct_add<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=6601431271997440 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void transformidctadd...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void apply_sao_internal<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=5336816135307264 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void applysaointernal...

Apple macOS HEIC File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of HEIC...

imagemagick:encoder_heic_fuzzer: Stack-use-after-return in void apply_sao_internal<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=6338853398511616 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderheicfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address: 0x7fb66d781ca4 Crash State: void...

PT-2021-6385 · Microsoft · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue concerns a remote code execution vulnerability. It involves a buffer overflow in the HEVC Video Extension codec when processing HEIC files, potentially allowing an...

imagemagick:encoder_heic_fuzzer: Stack-buffer-overflow in void apply_sao_internal<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5353262910930944 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0xeeb00f0c Crash State: void...

PT-2021-6406

Name of the Vulnerable Software and Affected Versions HEIF Image Extensions affected versions not specified Description The issue is related to a buffer overflow in memory when processing HEIC files, which can allow an attacker to execute arbitrary code. Recommendations At the moment, there is no...

imagemagick:encoder_heic_fuzzer: Stack-use-after-return in void apply_sao_internal<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=6096772740022272 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderheicfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Stack-use-after-return READ 4 Crash Address: 0x7fa584288c2c Crash State: void...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in decode_CABAC_FL_bypass

Detailed Report: https://oss-fuzz.com/testcase?key=6525861724553216 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decodeCABACFLbypass...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in decoded_picture_buffer::get_image

Detailed Report: https://oss-fuzz.com/testcase?key=5789145766166528 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decodedpicturebuffer::getimage...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void add_residual_fallback<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=6271566429159424 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void addresidualfallback void...

Nextcloud: HEIC image preview can be used to invoke Imagick

The HEIC image preview provider calls into Imagick at https://github.com/nextcloud/server/blob/5d097ddb4b99673f57b8c085dedd93880ee2539d/lib/private/Preview/HEIC.phpL98-L109. This is bad as Imagick processes all kind of image types. One can use this for example to exfiltrate arbitrary files by...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in transform_4x4_luma_add_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=6641530398965760 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: transform4x4lumaadd8fallback...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void transform_idct_add<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=6349718014787584 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void transformidctadd...

imagemagick:encoder_heic_fuzzer: Index-out-of-bounds in video_usability_information::hrd_parameters

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4727974048956416 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in transform_4x4_luma_add_16_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=6023032844976128 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: transform4x4lumaadd16fallback...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in decode_CABAC_FL_bypass

Detailed Report: https://oss-fuzz.com/testcase?key=5703162261536768 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: decodeCABACFLbypass...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=6704097009991680 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular vo...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_sample_filtering<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=4892472288346112 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void add_residual_fallback<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=4604460165890048 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void addresidualfallback void...