Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. These attacks can be triggered due to a heap-based buffer over-read in the IsWEBPImageLossless function of coders/webp.c...

imagemagick/encoder_jpg_fuzzer: Use-of-uninitialized-value in encode_mcu_gather

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4842845987930112 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderjpgfuzzer Fuzz target binary: encoderjpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_webp_fuzzer: Heap-buffer-overflow in ReadWebPLSBWord

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5114460055273472 Project: imagemagick Fuzzer: libFuzzerimagemagickpingwebpfuzzer Fuzz target binary: pingwebpfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_mvg_fuzzer: Crash in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5717396758200320 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_tiff64_fuzzer: Use-of-uninitialized-value in DecodeLabImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4812954626162688 Project: imagemagick Fuzzer: libFuzzerimagemagickencodertiff64fuzzer Fuzz target binary: encodertiff64fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type...

imagemagick/encoder_tiff64_fuzzer: Use-of-uninitialized-value in ScaleAnyToQuantum

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5146497357185024 Project: imagemagick Fuzzer: libFuzzerimagemagickencodertiff64fuzzer Fuzz target binary: encodertiff64fuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type...

[SECURITY] Fedora 28 Update: rubygem-rmagick-2.16.0-15.fc28

RMagick is an interface between Ruby and ImageMagick...

[SECURITY] Fedora 28 Update: ImageMagick-6.9.9.38-1.fc28

ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...

Heap overflow

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c...

CVE-2018-9133

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...

DEBIAN-CVE-2018-9135

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c...

CVE-2018-9133

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...

CVE-2018-9135

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c...

CVE-2018-9135

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c...

CVE-2018-9135

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c...

Code injection

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...

CVE-2018-9133

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...

CVE-2018-9135

In ImageMagick 7.0.7-24 Q16, there is a heap-based buffer over-read in IsWEBPImageLossless in coders/webp.c...

CVE-2018-9133

CVE-2018-9133 affects ImageMagick 7.0.7-26 Q16. The vulnerability is located in DecodeLabImage and EncodeLabImage (coders/tiff.c) and involves excessive iteration, which can cause a remote attacker to trigger a denial-of-service by processing a crafted TIFF file (hangs for tens of minutes). Conne...

CVE-2018-9133

ImageMagick 7.0.7-26 Q16 has excessive iteration in the DecodeLabImage and EncodeLabImage functions coders/tiff.c, which results in a hang tens of minutes with a tiny PoC file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tiff file...