The vulnerability of the MagickCore/layer.c component in the console-based image editing tool ImageMagick, related to the lack of zero-division checking, allows a hacker to trigger a service failure.

The vulnerability of the MagickCore/layer.c component in the console-based image editing tool ImageMagick is related to a division by zero error. Exploiting this vulnerability could allow an attacker to cause a service failure...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in transform_4x4_luma_add_8_fallback

Detailed Report: https://oss-fuzz.com/testcase?key=6232404489666560 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: transform4x4lumaadd8fallback...

ImageMagick Studio ImageMagick buffer overflow vulnerability (CNVD-2020-36739)

ImageMagick Studio ImageMagick is a suite of open-source image processing software from the American company ImageMagick Studio. The software can read, convert or write images in a variety of formats. ImageMagick Studio A buffer overflow vulnerability exists in the BlobToStringInfo of the...

CVE-2020-13902

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

CVE-2020-13902

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

CVE-2020-13902

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

Heap overflow

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

CVE-2020-13902

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

CVE-2020-13902

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

CVE-2020-13902

CVE-2020-13902 entry is rejected; this CVE is not an active vulnerability.

CVE-2020-13902

ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

PRET

The repository michaelxiaxc/PRET is a Printer Exploitation Toolkit that allows users to test the security of their printers. The tool connects to a device via network or USB and exploits the features of a given printer language, currently supporting PostScript, PJL, and PCL. The main idea of PRET...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in ReadOneMNGImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6605824029097984 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in ReadOneMNGImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4848610713010176 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

Null Pointer Dereference Vulnerability in ImageMagick

ImageMagick is an image processing software. It can edit and display most of today's most popular image formats including JPEG, TIFF, PNM, PNG, GIF and Photo CS. ImageMagick suffers from a null pointer dereference vulnerability that can be exploited by an attacker to cause the program to crash...

The vulnerability of the WritePNMImage function (coders/pnm.c) in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure and expose sensitive information.

The vulnerability of the WritePNMImage function in the console-based image editing tool ImageMagick is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures and expose sensitive informati...

imagemagick:encoder_heic_fuzzer: Segv on unknown address in slice_segment_header::operator=

Detailed Report: https://oss-fuzz.com/testcase?key=5094121109979136 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: slicesegmentheader::operator=...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void edge_filtering_luma_internal<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=5081293544226816 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void edgefilteringlumainternal...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void add_residual_fallback<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5757807575171072 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void addresidualfallback void...

imagemagick:ping_mng_fuzzer: Use-of-uninitialized-value in ScaleQuantumToChar

Detailed Report: https://oss-fuzz.com/testcase?key=5958982819905536 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ScaleQuantumToChar...