Lucene search
+L

15548 matches found

OSS-Fuzz
OSS-Fuzz
added 2020/05/04 6:09 p.m.22 views

imagemagick:encoder_ept2_fuzzer: Heap-buffer-overflow in PushQuantumFloat24Pixel

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5730554189447168 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderept2fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
added 2020/05/01 9:26 a.m.22 views

imagemagick:encoder_tiff64_fuzzer: Heap-buffer-overflow in PushLongPixel

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5737439391121408 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertiff64fuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
added 2020/04/30 1:00 p.m.25 views

imagemagick:encoder_heic_fuzzer: Heap-buffer-overflow in void apply_sao_internal<unsigned short>

Detailed Report: https://oss-fuzz.com/testcase?key=5673234361221120 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60c000006e28 Crash State: void...

6.8AI score
SaveExploits0Affected Software1
Veracode
Veracode
added 2020/04/29 10:57 p.m.25 views

Denial Of Service (DoS)

ImageMagick is vulnerable to Denial Of Service DoS. It is possible because of a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel...

8.8CVSS2.8AI score0.02281EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
added 2020/04/29 10:57 p.m.34 views

Denial Of Service (DoS)

ImageMagick is vulnerable to Denial of Service DoS. It has direct memory leaks in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c for a NULL value...

6.5CVSS3.1AI score0.02131EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
added 2020/04/29 10:57 p.m.25 views

Arbitrary Code Execution

ImageMagick 7.0.8-50 Q16 has a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo because of a MagickCore/enhance.c error...

8.8CVSS5.3AI score0.0237EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:00 a.m.17 views

The vulnerability of the ComplexImages function in the MagickCore/fourier.c component of the console-based image editing tool ImageMagick, which involves reading data beyond the permissible buffer size, allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ComplexImages function in the MagickCore/fourier.c component of the console-based image editing tool ImageMagick involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

8.8CVSS6.8AI score0.02827EPSS
SaveExploits1References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:00 a.m.10 views

The vulnerability of the EvaluateImages function in the console-based graphic editor ImageMagick allows a hacker to cause a service failure.

The vulnerability of the EvaluateImages function in the console-based graphic editor ImageMagick is related to the output of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

8.8CVSS7AI score0.02082EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.15 views

The vulnerability of the coders/mat.c function in the ImageMagick console graphics editor allows a hacker to gain access to confidential data after it is released. This enables the hacker to compromise the integrity of those data and cause service failures.

The vulnerability of the coders/mat.c function in the ImageMagick console graphics editor involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS6.7AI score0.04104EPSS
SaveExploits1References14Affected Software8
Tenable Nessus
Tenable Nessus
added 2020/04/21 12:00 a.m.25 views

Scientific Linux Security Update : ImageMagick on SL7.x x86_64 (20200407)

ImageMagick: multiple security vulnerabilities C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135797; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/03/15"; scriptcveid...

9.8CVSS7AI score0.05916EPSS
SaveExploits52References74
OSS-Fuzz
OSS-Fuzz
added 2020/04/20 6:18 p.m.19 views

imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in PerceptibleReciprocal

Detailed Report: https://oss-fuzz.com/testcase?key=5671531362910208 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: PerceptibleReciprocal...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
added 2020/04/16 1:39 a.m.21 views

imagemagick:encoder_xcf_fuzzer: Use-of-uninitialized-value in PerceptibleReciprocal

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5632675526475776 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderxcffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

6.8AI score
SaveExploits0Affected Software1
OpenVAS
OpenVAS
added 2020/04/16 12:00 a.m.46 views

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2020-1390)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.3AI score0.49324EPSS
SaveExploits25References2
Tenable Nessus
Tenable Nessus
added 2020/04/15 12:00 a.m.45 views

EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2020-1390)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Pho...

9.8CVSS7.5AI score0.49324EPSS
SaveExploits25References119
OSS-Fuzz
OSS-Fuzz
added 2020/04/12 9:15 p.m.19 views

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_fuji_compressed_header

Detailed Report: https://oss-fuzz.com/testcase?key=5634881263763456 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::parsefujicompressedhead...

6.8AI score
SaveExploits0Affected Software1
Veracode
Veracode
added 2020/04/11 1:40 a.m.34 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The vulnerability exists due to several memory leaks exist in WritePDFImage in coders/pdf.c...

7.5CVSS2.9AI score0.03802EPSS
SaveExploits1References16Affected Software4
Veracode
Veracode
added 2020/04/11 1:40 a.m.22 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS...

7.5CVSS2.5AI score0.02937EPSS
SaveExploits1References14Affected Software4
Veracode
Veracode
added 2020/04/10 12:47 a.m.29 views

Denial Of Service (DoS)

ImageMagick is vulnerable to Denial of Service DoS. It is due to an integer overflow flaw, leading to a heap-based buffer overflow in the ImageMagick routine responsible for creating X11 images. An attacker could create a specially-crafted image file that, when opened by a victim, would cause...

9.3CVSS5.3AI score0.07153EPSS
SaveExploits0References22Affected Software1
Veracode
Veracode
added 2020/04/10 12:20 a.m.29 views

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw was found in the way ImageMagick parsed XCF files. If a specially-crafted XCF image was opened, ImageMagick could be made to overwrite heap memory beyond the bounds of its allocate...

6.8CVSS4.1AI score0.04528EPSS
SaveExploits2References18Affected Software1
Veracode
Veracode
added 2020/04/10 12:20 a.m.32 views

Arbitrary Code Execution

imagemagick is vulnerable to arbitrary code execution. The vulnerability exists as a heap-based buffer overflow flaw was found in ImageMagick's processing of certain malformed PCX images. If a victim opened a specially-crafted PCX file, an attacker could possibly execute arbitrary code on the...

6.8CVSS5.1AI score0.04484EPSS
SaveExploits2References20Affected Software1
Rows per page
Query Builder