Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists in ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

imagemagick:encoder_inline_fuzzer: Heap-buffer-overflow in Fax4Decode

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5697773958332416 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderinlinefuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE ...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in RenderMVGContent

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5729350432063488 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

ImageMagick 7.0.9-27 < 7.0.10-17 Heap-buffer-overflow in BlobToStringInfo

The remote Windows host has a version of ImageMagick installed that is 7.0.9-27 prior to 7.0.10-17 It is, therefore, affected by a heap-based buffer over-read vulnerability due to a flaw in BlobToStringInfo in MagickCore/string.c during TIFF image decoding. C Tenable, Inc. include'compat.inc'; if...

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2020-1806)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : ImageMagick (EulerOS-SA-2020-1806)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of servic...

Amazon Linux AMI : php-pecl-imagick (ALAS-2020-1391)

The version of php-pecl-imagick installed on the remote host is prior to 3.4.4-1.8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1391 advisory. An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImag...

The vulnerability in the implementation of the WritePDFImage function in ImageMagick and GraphicsMagick graphic editors allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the WritePDFImage function in ImageMagick and GraphicsMagick graphic editors is related to resource management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created image...

imagemagick:encoder_mvg_fuzzer: Heap-buffer-overflow in RenderMVGContent

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5716327751483392 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encodermvgfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1...

Debian DSA-4715-1 : imagemagick - security update

This update fixes multiple vulnerabilities in Imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or potentially the execution of arbitrary code if malformed image files are processed. C Tenable Netwo...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void transform_idct_add<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5727381772566528 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void transformidctadd...

Debian: Security Advisory (DSA-4715-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4715-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4715-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 02, 2020 https://www.debian.org/security/faq -...

DSA-4715-1 imagemagick - security update

Bulletin has no description...

Debian: Security Advisory (DSA-4712-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4712-1 : imagemagick - security update

This update fixes multiple vulnerabilities in Imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or potentially the execution of arbitrary code if malformed image files are processed. C Tenable Netwo...

[SECURITY] [DSA 4712-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4712-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 30, 2020 https://www.debian.org/security/faq -...

DSA-4712-1 imagemagick - security update

Bulletin has no description...

imagemagick:ping_dng_fuzzer: Global-buffer-overflow in LibRaw::parseCanonMakernotes

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5655361509130240 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 4 Cra...

imagemagick:encoder_dng_fuzzer: Global-buffer-overflow in LibRaw::parseSigmaMakernote

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5693021307011072 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderdngfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Global-buffer-overflow READ 4...