CVE-2017-18211

CVE-2017-18211 affects ImageMagick 7.0.7. A NULL pointer dereference in saveBinaryCLProgram (magick/opencl.c) arises when a program-lookup result is not checked (related to CacheOpenCLKernel). This can impact ImageMagick components relying on OpenCL, with CVSS indicating high/critical potential. ...

CVE-2017-18210

CVE-2017-18210 affects ImageMagick 7.0.7 where the NULL pointer dereference occurs in the function BenchmarkOpenCLDevices (MagickCore/opencl.c) due to an unchecked memory allocation result. Multiple connected sources corroborate this vulnerability pattern for ImageMagick 7.0.7 and describe the ro...

CVE-2017-18210

In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked...

CVE-2017-18210

In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function BenchmarkOpenCLDevices in MagickCore/opencl.c because a memory allocation result is not checked...

SUSE-SU-2018:0581-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2017-9405: A memory leak in the ReadICONImage function was fixed that could lead to DoS via memory exhaustion bsc1042911 - CVE-2017-9407: In ImageMagick, the ReadPALMImage function in palm.c allowed attackers to cause a denial of servi...

CVE-2017-18211

In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a program-lookup result is not checked, related to CacheOpenCLKernel...

CVE-2017-18209

In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulnerability occurs because a memory allocation result is not checked, related to GetOpenCLCacheDirectory...

UBUNTU-CVE-2017-18209

In the GetOpenCLCachedFilesDirectory function in magick/opencl.c in ImageMagick 7.0.7, a NULL pointer dereference vulnerability occurs because a memory allocation result is not checked, related to GetOpenCLCacheDirectory...

UBUNTU-CVE-2017-18211

In ImageMagick 7.0.7, a NULL pointer dereference vulnerability was found in the function saveBinaryCLProgram in magick/opencl.c because a program-lookup result is not checked, related to CacheOpenCLKernel...

imagemagick/encoder_label_fuzzer: Use-of-uninitialized-value in StringInfoToHexString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5710818319532032 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderlabelfuzzer Fuzz target binary: encoderlabelfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

CVE-2018-7470

An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service segmentation violation via a crafted file...

CVE-2018-7443

The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of image data in a file, which allows remote attackers to cause a denial of service memory allocation failure in the AcquireMagickMemory function in MagickCore/memory.c...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in TracePoint

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5731419616706560 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_mpc_fuzzer: Heap-buffer-overflow in ReadMPCImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5434829609893888 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermpcfuzzer Fuzz target binary: encodermpcfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

ImageMagick 'IsWEBPImageLossless' Function Denial of Service Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the 'IsWEBPImageLossless' function of the coders/webp.c file in ImageMagick version...

Debian DLA-1293-1 : imagemagick security update

It was discovered that there was a remote denial of service vulnerability in the imagemagick graphics library via a specially- crafted TIFF file. For Debian 7 'Wheezy', this issue has been fixed in imagemagick version 8:6.7.7.10-5+deb7u21. We recommend that you upgrade your imagemagick packages...

[SECURITY] [DLA 1293-1] imagemagick security update

Package : imagemagick Version : 8:6.7.7.10-5+deb7u21 CVE ID : CVE-2018-7443 Debian Bug : 891291 It was discovered that there was a remote denial of service vulnerability in the imagemagick graphics library via a specially- crafted TIFF file. For Debian 7 "Wheezy", this issue has been fixed in...

CVE-2018-7470

An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service segmentation violation via a crafted file...

CVE-2018-7470

An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service segmentation violation via a crafted file...

CVE-2018-7470

An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service segmentation violation via a crafted file...