15662 matches found
imagemagick/encoder_ept3_fuzzer: Use-of-uninitialized-value in WriteBlob
Detailed report: https://oss-fuzz.com/testcase?key=5085775568306176 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderept3fuzzer Fuzz target binary: encoderept3fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
[SECURITY] Fedora 29 Update: php-horde-Horde-Image-2.5.4-1.fc29
An Image utility API, with backends for: GD GIF PNG SVG SWF ImageMagick convert command line tool Imagick Extension Optional dependency: php-pecl-imagick...
[SECURITY] Fedora 28 Update: php-horde-Horde-Image-2.5.4-1.fc28
An Image utility API, with backends for: GD GIF PNG SVG SWF ImageMagick convert command line tool Imagick Extension Optional dependency: php-pecl-imagick...
Fedora 29 : php-horde-Horde-Image (2019-89c1abeac9)
HordeImage 2.5.4 - mjr SECURITY: Fix potential RCE in the text method when using the Imagemagick backend. - mjr SECURITY: Sanitize image type parameter PR: 2, Fariskhi Vidyan. - mjr Fix issues with escaping single and double quote characters in the text method when using the Imagemagick backend...
Fedora 28 : php-horde-Horde-Image (2019-944ff52ce6)
HordeImage 2.5.4 - mjr SECURITY: Fix potential RCE in the text method when using the Imagemagick backend. - mjr SECURITY: Sanitize image type parameter PR: 2, Fariskhi Vidyan. - mjr Fix issues with escaping single and double quote characters in the text method when using the Imagemagick backend...
PT-2019-5492 · Graphicsmagick +6 · Graphicsmagick +6
Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-25 GraphicsMagick versions prior to 1.3.32 Description: The issue is related to memory management errors in the WritePDFImage function of graphic editors ImageMagick and GraphicsMagick. Exploitation of this...
CVE-2018-20467
In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...
MGASA-2019-0006 Updated imagemagick packages fix security vulnerabilities & bugs
Imagemagick has been updated to fix several bugs and security issues...
Updated imagemagick packages fix security vulnerabilities & bugs
Imagemagick has been updated to fix several bugs and security issues...
Fedora 28 : 1:ImageMagick / libpaper / rubygem-rmagick (2018-3b518bd80f)
Fixing leaking descriptor libpaper - Fixed numerous use of uninitialized values, integer overflow, memory exceeded, and timeouts credit to OSS Fuzz. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...
SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:2977-1)
This update for ImageMagick fixes the following security issues : CVE-2018-16413: Prevent heap-based buffer over-read in the PushShortPixel function leading to DoS bsc1106989 CVE-2018-16329: Prevent NULL pointer dereference in the GetMagickProperty function leading to DoS bsc1106858...
SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:2562-1)
This update for ImageMagick fixes the following issues : Security issue fixed : Disable PS, PS2, PS3, XPS and PDF coders in default policy.xml bsc1105592 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempte...
SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:2475-1)
This update for ImageMagick fixes the following issues: Security issues fixed : - CVE-2018-14434: A memory leak for a colormap in WriteMPCImage incoders/mpc.c was fixed. bsc1102003 - CVE-2018-14435: A memory leak in DecodeImage in coders/pcd.c was fixed. bsc1102007 - CVE-2018-14436: A memory leak...
SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:3753-1)
This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2018-18024: Fixed an infinite loop in the ReadBMPImage function. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file. bsc1111069 CVE-2018-18016: Fixed a memory...
SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:2043-1)
This update for ImageMagick fixes the following issues: The following security vulnerabilities were fixed : - CVE-2018-11625: Fixed heap-based buffer over-read in SetGrayscaleImage in the quantize.c file, which allowed remote attackers to cause buffer over-read via a crafted file. bsc1096200 -...
SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2018:3072-1)
This update for ImageMagick fixes the following issues : Allow writing PS, PS2, PS3, XPS, EPS and PDF, disable reading these filetypes only by default security policy bsc1105592 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...
imagemagick/rotate_fuzzer: Index-out-of-bounds in LibRaw::subtract_black_internal
Detailed report: https://oss-fuzz.com/testcase?key=5707327297028096 Project: imagemagick Fuzzer: libFuzzerimagemagickrotatefuzzer Fuzz target binary: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...
imagemagick/ping_mvg_fuzzer: Use-of-uninitialized-value in ReadCAPTIONImage
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5707184080420864 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...
imagemagick/ping_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_sinar_ia
Detailed report: https://oss-fuzz.com/testcase?key=5747962597081088 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...
