imagemagick/encoder_mat_fuzzer: Heap-use-after-free in ReadImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5721754591297536 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermatfuzzer Fuzz target binary: encodermatfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

DEBIAN-CVE-2019-7175

In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c...

UBUNTU-CVE-2019-7175

In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c...

The vulnerability of the ParseImageResourceBlocks function in the cross-platform library for working with ImageMagick graphics allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ParseImageResourceBlocks function “coders/psd.c” in the cross-platform library for working with ImageMagick is related to reading beyond the allowable memory limit due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause service failures or...

ImageMagick Denial of Service Vulnerability (CNVD-2018-26703)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'WritePDBImage' function in the coders/pdb.c file in ImageMagick version...

UBUNTU-CVE-2018-18544

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31...

ImageMagick Denial of Service Vulnerability (CNVD-2018-20677)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the 'ReadBMPImage' function of the coders/bmp.c file in ImageMagick version 7.0.8-1...

DEBIAN-CVE-2018-18023

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a crafted SVG image file...

DEBIAN-CVE-2018-18024

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

UBUNTU-CVE-2018-18025

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

DEBIAN-CVE-2018-18016

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePCXImage in coders/pcx.c...

PT-2018-3706 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8 through 7.0.13 Description: The issue is related to an infinite loop in the ReadBMPImage function of the coders/bmp.c file. This allows a remote attacker to cause a denial of service using a specially crafted bmp...

PT-2018-3702 · Imagemagick +1 · Imagemagick +1

Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8 through 7.0.13 Description: The issue is related to a heap-based buffer over-read in the EncodeImage function of coders/pict.c. This allows attackers to cause a denial of service via a crafted SVG image file. The...

USN-3785-1 imagemagick vulnerabilities

Due to a large number of issues discovered in GhostScript that prevent it from being used by ImageMagick safely, this update includes a default policy change that disables support for the Postscript and PDF formats in ImageMagick. This policy can be overridden if necessary by using an alternate...

UBUNTU-CVE-2018-17967

ImageMagick 7.0.7-28 has a memory leak vulnerability in ReadBGRImage in coders/bgr.c...

DEBIAN-CVE-2018-17966

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c...

UBUNTU-CVE-2018-17966

ImageMagick 7.0.7-28 has a memory leak vulnerability in WritePDBImage in coders/pdb.c...

UBUNTU-CVE-2018-17965

ImageMagick 7.0.7-28 has a memory leak vulnerability in WriteSGIImage in coders/sgi.c...

PT-2018-14303 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.7-28 Description: The issue is related to a memory leak in the WritePDBImage function located in coders/pdb.c. Recommendations: For ImageMagick version 7.0.7-28, consider updating to a newer version that contains a fix...

DEBIAN-CVE-2018-16749

In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of service WriteBlob assertion failure and application exit via a crafted file...