imagemagick/ping_mng_fuzzer: Use-of-uninitialized-value in ReadOneMNGImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5221778856083456 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmngfuzzer Fuzz target binary: pingmngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_jpg_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5194510259716096 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderjpgfuzzer Fuzz target binary: encoderjpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_mng_fuzzer: Heap-buffer-overflow in mng_get_long

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5109602262712320 Project: imagemagick Fuzzer: aflimagemagickpingmngfuzzer Fuzz target binary: pingmngfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow...

imagemagick/encoder_heic_fuzzer: Heap-buffer-overflow in decoder_context::process_reference_picture_set

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5750450306416640 Project: imagemagick Fuzzer: aflimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in CopyMagickString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6260469015773184 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

Node.js third-party modules: Command injection in 'pdf-image'

I would like to report command injection in pdf-image It allows executing commands on the server Module module name: pdf-image version: 1.0.5 npm page: https://www.npmjs.com/package/pdf-image Module Description Provides an interface to convert PDF's pages to png files in Node.js by using...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in CropImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5697260525453312 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_heic_fuzzer: Index-out-of-bounds in ReadHEICImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6265219987800064 Project: imagemagick Fuzzer: libFuzzerimagemagickpingheicfuzzer Fuzz target binary: pingheicfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_png_fuzzer: Use-of-uninitialized-value in ConstantString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5757152200228864 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpngfuzzer Fuzz target binary: encoderpngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in void transform_idct_add<unsigned char>

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5189791852265472 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

ImageMagick 'ReadOneMNGImage' function infinite loop vulnerability

ImageMagick is a set of open source image processing software. The software can read, convert and write images in a variety of formats. A security vulnerability exists in the 'ReadOneMNGImage' function in the coders/png.c file in ImageMagick version 7.0.7-28. A remote attacker can exploit this...

CVE-2018-10177

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

CVE-2018-10177

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

Design/Logic Flaw

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

DEBIAN-CVE-2018-10177

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

CVE-2018-10177

CVE-2018-10177: ImageMagick has an infinite loop in ReadOneMNGImage (coders/png.c) when processing crafted MNG images, enabling remote denial of service. The vulnerability is reported for ImageMagick 7.0.7-28; the affected component/file is ReadOneMNGImage in coders/png.c. No remediation details ...

CVE-2018-10177

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

CVE-2018-10177

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

imagemagick/encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::panasonic_load_raw

Detailed report: https://oss-fuzz.com/testcase?key=5147834853621760 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderdngfuzzer Fuzz target binary: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick/encoder_mvg_fuzzer: Use-of-uninitialized-value in TraceStrokePolygon

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5452606001381376 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...