15555 matches found
imagemagick:ping_miff_fuzzer: Heap-buffer-overflow in PushDoublePixel
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5700086448783360 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmifffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...
CVE-2019-15140
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...
CVE-2019-15139
The XWD image X Window System window dumping file parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service application crash resulting from an out-of-bounds Read in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability th...
CVE-2019-15141
WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service application crash resulting from a heap-based buffer over-read via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and...
imagemagick:ping_dng_fuzzer: Heap-buffer-overflow in LibRaw::sony_decrypt
Detailed Report: https://oss-fuzz.com/testcase?key=5632223331483648 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0xf5ff98e1 Crash State: LibRaw::sonydecryp...
CVE-2019-17541
ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c...
CVE-2019-17547
In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a use-after-free...
SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:2785-1)
This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage. bsc1146213 CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser. bsc1146212 CVE-2019-15141: Fixed a divide-by-zero vulnerabili...
SUSE-SU-2019:2785-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage. bsc1146213 - CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser. bsc1146212 - CVE-2019-15141: Fixed a divide-by-zero...
CVE-2019-17540
ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c...
imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in decode_CABAC_FL_bypass
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5670034646499328 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
Debian: Security Advisory (DLA-1968-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1968-1 : imagemagick security update
Multiple vulnerabilities have been found in imagemagick, an image processing toolkit. CVE-2019-11470 Uncontrolled resource consumption caused by insufficiently sanitized image size in ReadCINImage coders/cin.c. This vulnerability might be leveraged by remote attackers to cause denial of service v...
[SECURITY] [DLA 1968-1] imagemagick security update
Package : imagemagick Version : 8:6.8.9.9-5+deb8u18 CVE ID : CVE-2019-11470 CVE-2019-14981 CVE-2019-15139 CVE-2019-15140 Multiple vulnerabilities have been found in imagemagick, an image processing toolkit. CVE-2019-11470 Uncontrolled resource consumption caused by insufficiently sanitized image...
DLA-1968-1 imagemagick - security update
Bulletin has no description...
imagemagick:ping_tiff_fuzzer: Stack-buffer-overflow in _TIFFVGetField
Detailed Report: https://oss-fuzz.com/testcase?key=5841571697655808 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingtifffuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0xffed7580 Crash State: TIFFVGetField...
Denial Of Service (DoS)
imagemagick is vulnerable to denial of service. A use-after-free in DestroyStringInfo in MagickCore/string.c caused by a mishandling of the error manager in coders/jpeg.c allows an attacker to crash the application from a heap-based buffer overflow, and potentially execute arbitrary code in the...
imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in ClampToQuantum
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5665950904352768 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
imagemagick:encoder_heic_fuzzer: Memcpy-param-overlap in NAL_unit::set_data
Detailed Report: https://oss-fuzz.com/testcase?key=5698815994101760 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address: 0x00000000,0xffffffff and 0xf13034a5,...