Lucene search
+L

15536 matches found

ArchLinux
ArchLinux
added 2020/06/28 12:00 a.m.37 views

[ASA-202006-14] imagemagick: information disclosure

Arch Linux Security Advisory ASA-202006-14 ========================================== Severity: Medium Date : 2020-06-28 CVE-ID : CVE-2020-13902 Package : imagemagick Type : information disclosure Remote : Yes Link : https://security.archlinux.org/AVG-1181 Summary ======= The package imagemagick...

7.1CVSS1.1AI score0.00965EPSS
SaveExploits0References5
OSS-Fuzz
OSS-Fuzz
added 2020/06/27 9:47 a.m.28 views

imagemagick:ping_mvg_fuzzer: Heap-buffer-overflow in DrawPrimitive

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5681725698211840 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash...

6.8AI score
SaveExploits0Affected Software1
Amazon
Amazon
added 2020/06/26 12:00 a.m.51 views

Medium: php-pecl-imagick

Issue Overview: An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImage in coders/gif.c, which allow remote attackers to cause a denial of service via a crafted file. CVE-2017-18254 An issue was discovered in ImageMagick 7.0.7. The...

9.8CVSS9.1AI score0.05916EPSS
SaveExploits52
OSS-Fuzz
OSS-Fuzz
added 2020/06/25 7:30 p.m.22 views

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::copy_bayer

Detailed Report: https://oss-fuzz.com/testcase?key=5679559776403456 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::copybayer...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
added 2020/06/21 11:09 p.m.25 views

imagemagick:ping_tiff_fuzzer: Stack-buffer-overflow in _TIFFVGetField

Detailed Report: https://oss-fuzz.com/testcase?key=5456669504176128 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingtifffuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0xffa45c90 Crash State: TIFFVGetField...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
added 2020/06/21 6:42 a.m.19 views

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void intra_prediction_angular<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=4861157222645760 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void intrapredictionangular vo...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
added 2020/06/20 4:39 p.m.20 views

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Detailed Report: https://oss-fuzz.com/testcase?key=5389744954671104 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

6.8AI score
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2020/06/19 3:56 p.m.41 views

CVE-2020-13902

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

5.8CVSS2.3AI score0.00965EPSS
SaveExploits0References3
OSS-Fuzz
OSS-Fuzz
added 2020/06/17 4:36 a.m.24 views

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6275808921649152 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

6.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:00 a.m.9 views

The vulnerability of the MagickCore/layer.c component in the console-based image editing tool ImageMagick, related to the lack of zero-division checking, allows a hacker to trigger a service failure.

The vulnerability of the MagickCore/layer.c component in the console-based image editing tool ImageMagick is related to a division by zero error. Exploiting this vulnerability could allow an attacker to cause a service failure...

6.5CVSS6.7AI score0.04352EPSS
SaveExploits1References14Affected Software5
OSS-Fuzz
OSS-Fuzz
added 2020/06/10 9:23 p.m.19 views

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in transform_4x4_luma_add_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=6232404489666560 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: transform4x4lumaadd8fallback...

6.8AI score
SaveExploits0Affected Software1
CNVD
CNVD
added 2020/06/08 12:00 a.m.12 views

ImageMagick Studio ImageMagick buffer overflow vulnerability (CNVD-2020-36739)

ImageMagick Studio ImageMagick is a suite of open-source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. ImageMagick Studio A buffer overflow vulnerability exists in the BlobToStringInfo of the...

7.1CVSS9.3AI score0.00965EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/07 6:15 p.m.22 views

CVE-2020-13902

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

7.1CVSS7AI score0.00965EPSS
SaveExploits0References1
OSV
OSV
added 2020/06/07 6:15 p.m.28 views

CVE-2020-13902

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

7.1CVSS6.8AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2020/06/07 6:15 p.m.38 views

CVE-2020-13902

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

7.1CVSS7.3AI score0.00965EPSS
SaveExploits0References3
Prion
Prion
added 2020/06/07 6:15 p.m.25 views

Heap overflow

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

5.8CVSS6.8AI score0.00965EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2020/06/07 5:06 p.m.79 views

CVE-2020-13902

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

7.1CVSS7.1AI score0.00965EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2020/06/07 5:06 p.m.72 views

CVE-2020-13902

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

7.1CVSS7.3AI score0.00965EPSS
SaveExploits0
CVE
CVE
added 2020/06/07 5:06 p.m.130 views

CVE-2020-13902

CVE-2020-13902 entry is rejected; this CVE is not an active vulnerability.

7.1CVSS6.8AI score0.00965EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/06/07 5:06 p.m.37 views

CVE-2020-13902

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

6.9AI score0.00965EPSS
SaveExploits0References1
Rows per page
Query Builder