CVE-2018-11625

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

CVE-2018-11624

CVE-2018-11624 : In ImageMagick, the ReadMATImage function (coders/mat.c) allows a crafted MAT file to trigger a use-after-free, enabling memory corruption. The issue is tied to ImageMagick 7.0.7-36 Q16 and is referenced across multiple advisories (OpenSUSE/SUSE and NES/Nessus entries) as a vulne...

CVE-2018-11624

In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file...

imagemagick/ping_mvg_fuzzer: Use-of-uninitialized-value in StringInfoToHexString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6231379485392896 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

UBUNTU-CVE-2018-11625

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

CVE-2018-11625

In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file...

imagemagick/ping_dng_fuzzer: Use-of-uninitialized-value in LibRaw_buffer_datastream::seek

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5631450131988480 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_jng_fuzzer: Use-of-uninitialized-value in LibRaw::canon_has_lowbits

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5788308352270336 Project: imagemagick Fuzzer: libFuzzerimagemagickpingjngfuzzer Fuzz target binary: pingjngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_ptif_fuzzer: Stack-buffer-overflow in _TIFFVGetField

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4887809402863616 Project: imagemagick Fuzzer: aflimagemagickpingptiffuzzer Fuzz target binary: pingptiffuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: Stack-buffer-overflo...

EulerOS 2.0 SP1 : ImageMagick (EulerOS-SA-2018-1127)

According to the version of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service MagickCore/memory.c double free...

Debian DLA-1381-1 : imagemagick security update

Several security vulnerabilities were discovered in ImageMagick, an image manipulation program, that allow remote attackers to cause a denial of service via CPU exhaustion infinite loop or heap-based buffer overreads with a crafted image file. For Debian 7 'Wheezy', these problems have been fixed...

[SECURITY] [DLA 1381-1] imagemagick security update

Package : imagemagick Version : 8:6.7.7.10-5+deb7u22 CVE ID : CVE-2017-18271 CVE-2017-18273 CVE-2018-11251 Several security vulnerabilities were discovered in ImageMagick, an image manipulation program, that allow remote attackers to cause a denial of service via CPU exhaustion infinite loop or...

imagemagick/ping_jng_fuzzer: Use-of-uninitialized-value in LibRaw::copy_bayer

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5117608809463808 Project: imagemagick Fuzzer: libFuzzerimagemagickpingjngfuzzer Fuzz target binary: pingjngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

DLA-1381-1 imagemagick - security update

Bulletin has no description...

Debian: Security Advisory (DLA-1381-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-11251

In ImageMagick 7.0.7-23 Q16 x8664 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service application crash in SetGrayscaleImage in MagickCore/quantize.c via a crafted SUN image file...

CVE-2017-18273

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted image file that is mishandled in a GetImageIndexInList call...

CVE-2017-18272

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call...

CVE-2017-18271

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service CPU exhaustion via a crafted MIFF image file...

imagemagick/ping_wpg_fuzzer: Index-out-of-bounds in LibRaw::parse_fuji

Detailed report: https://oss-fuzz.com/testcase?key=5432317716725760 Project: imagemagick Fuzzer: libFuzzerimagemagickpingwpgfuzzer Fuzz target binary: pingwpgfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: LibRaw::parsefuji...