CVE-2017-18022

In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c...

imagemagick/enhance_fuzzer: Use-of-uninitialized-value in EnhanceImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5313517088407552 Project: imagemagick Fuzzer: libFuzzerimagemagickenhancefuzzer Fuzz target binary: enhancefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/crop_fuzzer: Use-of-uninitialized-value in PushColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5110343828242432 Project: imagemagick Fuzzer: libFuzzerimagemagickcropfuzzer Fuzz target binary: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

CVE-2018-5248

In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixeldecode function...

CVE-2018-5246

In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c...

CVE-2018-5247

In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c...

Debian: Security Advisory (DLA-868-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

imagemagick/crop_fuzzer: Use-of-uninitialized-value in ParseCommandOption

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6232677838487552 Project: imagemagick Fuzzer: libFuzzerimagemagickcropfuzzer Fuzz target binary: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/huffman_decode_fuzzer: Use-of-uninitialized-value in ReadPGXImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5828212144734208 Project: imagemagick Fuzzer: libFuzzerimagemagickhuffmandecodefuzzer Fuzz target binary: huffmandecodefuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type...

imagemagick/encoder_pct_fuzzer: Use-of-uninitialized-value in WritePixelCacheRegion

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5594915460349952 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpctfuzzer Fuzz target binary: encoderpctfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:0055-1)

This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2017-1000476: A CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allowed attackers to cause a denial of service bsc1074610. - CVE-2017-9409: The ReadMPCImage functio...

SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2018:0043-1)

This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2017-14343: Fixed a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file bsc1058422. - CVE-2017-12691: The ReadOneLayer function in coders/xcf.c allowed remote attackers to...

CVE-2017-1000476

ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service...

imagemagick/encoder_vda_fuzzer: Use-of-uninitialized-value in GetMagicInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6001481594437632 Project: imagemagick Fuzzer: libFuzzerimagemagickencodervdafuzzer Fuzz target binary: encodervdafuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

SUSE-SU-2018:0055-1 Security update for ImageMagick

This update for ImageMagick fixes several issues. These security issues were fixed: - CVE-2017-1000476: A CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allowed attackers to cause a denial of service bsc1074610. - CVE-2017-9409: The ReadMPCImage function...

imagemagick/encoder_svgz_fuzzer: Use-of-uninitialized-value in ReadBlobLZWByte

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5292498759974912 Project: imagemagick Fuzzer: libFuzzerimagemagickencodersvgzfuzzer Fuzz target binary: encodersvgzfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_epdf_fuzzer: Use-of-uninitialized-value in PushColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5270640597663744 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderepdffuzzer Fuzz target binary: encoderepdffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_vda_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5243340443353088 Project: imagemagick Fuzzer: libFuzzerimagemagickencodervdafuzzer Fuzz target binary: encodervdafuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_k_fuzzer: Use-of-uninitialized-value in ConstantString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5202761055469568 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderkfuzzer Fuzz target binary: encoderkfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_isobrl6_fuzzer: Heap-buffer-overflow in PushLongPixel

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5078412994543616 Project: imagemagick Fuzzer: aflimagemagickencoderisobrl6fuzzer Fuzz target binary: encoderisobrl6fuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...