15575 matches found
CVE-2019-17547
CVE-2019-17547 affects ImageMagick regression in TraceBezier (MagickCore/draw.c) where a use-after-free exists in versions prior to 7.0.8-62. The NVD entry notes a base score of 6.8 (CVSS v2) and 8.8 (CVSS v3.1) with Network attack and no authentication required (CVSS2) and High impact on confide...
CVE-2019-17547
In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a use-after-free...
CVE-2019-17541
CVE-2019-17541 : ImageMagick prior to 7.0.8-55 contains a use-after-free in DestroyStringInfo (MagickCore/string.c) due to mishandling of the error manager in coders/jpeg.c. This can lead to arbitrary code execution or crashes as described by the CVE entry (impact to confidentiality, integrity, a...
CVE-2019-17541
ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c...
CVE-2019-17541
ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c...
CVE-2019-17541
ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c...
ImageMagick heap buffer overflow vulnerability (CNVD-2019-41020)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A heap buffer overflow vulnerability exists in ReadPSInfo in coders/ps.c in versions of ImageMagick prior to 7.0.8-54. An attacker could exploit this vulnerability to...
PT-2019-5730 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.10-69 and 7.0.8-69 Description: The issue is related to the IntensityCompare function in the /magick/quantize.c file of the ImageMagick console graphic editor, which is associated with an integer overflow. Th...
ImageMagick memory misreference vulnerability (CNVD-2019-41003)
ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A memory misreference vulnerability exists in DestroyStringInfo in MagickCore/string.c in versions of ImageMagick prior to 7.0.8-55. The vulnerability stems from the...
PT-2019-5848 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: The issue is related to the RestoreMSCWarning function in the /coders/pdf.c component of the ImageMagick console graphic editor. It is caused by an integer overflow value. This could allow a...
imagemagick:encoder_mvg_fuzzer: Use-of-uninitialized-value in DrawPrimitive
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5033441388658688 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...
imagemagick:ping_ptif_fuzzer: Heap-buffer-overflow in TIFFGetProfiles
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5638770103156736 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingptiffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...
PT-2019-5847 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: A flaw was found in ImageMagick in coders/bmp.c, related to an integer overflow of the value. This could allow a remote attacker to cause a denial of service using a specially crafted file. T...
PT-2019-5852 · Imagemagick +5 · Imagemagick +5
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: The issue is related to an integer overflow in the HistogramCompare function within the MagickCore/histogram.c component of ImageMagick. This overflow can occur during simple math calculation...
PT-2019-5850 · Imagemagick +4 · Imagemagick +4
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: The issue is related to an integer overflow in the MagickCore/quantum-private.h component of the ImageMagick console graphic editor. This allows a remote attacker to cause a denial of service...
imagemagick:encoder_tiff_fuzzer: Crash in TIFFReadCustomStream
Detailed Report: https://oss-fuzz.com/testcase?key=5636362253893632 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodertifffuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xe610047c Crash State: TIFFReadCustomStream ReadBlob...
CVE-2017-8344
In ImageMagick 7.0.5-5, the ReadPCXImage function in pcx.c allows attackers to cause a denial of service memory leak via a crafted file...
CVE-2018-16749
In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service WriteBlob assertion failure and application exit via a crafted file...
CVE-2017-17680
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of service via a crafted xpm image file...