336 matches found
CVE-2022-32323
AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660...
Heap overflow
AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660...
CVE-2022-32323
AutoTrace v0.40.0 is affected by a heap overflow in ReadImage() at input-bmp.c:660 (CVE-2022-32323). This vulnerability is described across multiple advisories as enabling, in the worst case, arbitrary code execution or a crash when processing crafted BMP images. The issue is evidenced in various...
CVE-2022-32323
AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660...
CVE-2022-32323: Out-of-bounds Write
AutoTrace v0.40.0 was discovered to contain a heap overflow via the ReadImage function at input-bmp.c:660...
AutoTrace 缓冲区错误漏洞
AutoTrace is a suite of software for converting Bitmap files to Vector files. A security vulnerability exists in AutoTrace version v0.40.0, which stems from a heap overflow condition found in the ReadImage function via input-bmp.c:660...
PT-2022-21228 · Autotrace +3 · Autotrace +3
Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.40.0 Description: A heap overflow issue was discovered in AutoTrace via the ReadImage function at input-bmp.c:660. Recommendations: For AutoTrace version 0.40.0, consider restricting access to the ReadImage function as a...
Design/Logic Flaw
There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...
UBUNTU-CVE-2020-19492
There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...
CVE-2020-19492
The CVE affects sam2p 0.49.4. A floating-point exception in ReadImage can cause a segmentation fault, leading to denial of service and potentially other impact. CNVD-2022-06516 notes exploitation via specially crafted input to trigger DoS. Public details in connected documents do not specify a pa...
Sam2p 安全漏洞
sam2p is a command-line utility that converts many raster bitmap image formats such as GIF, JPG/JPEG, and PNG to PostScript or PDF files. sam2p version 0.49.4 is vulnerable to a segmentation error. The vulnerability stems from a floating-point exception in ReadImage. An attacker could exploit the...
CVE-2020-19492: Undefined Security Weakness
There is a floating point exception in ReadImage that leads to a Segmentation fault in sam2p 0.49.4. A crafted input will lead to a denial of service or possibly unspecified other impact...
imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in ReadOneMNGImage
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4848610713010176 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
imagemagick:ping_pict_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5087317020901376 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS. The attack exists because the function in ReadImage in MagickCore/constitute.c does not properly handle the input matlab image file...
graphicsmagick:coder_PICT_fuzzer: Heap-buffer-overflow in DecodeImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5649205997862912 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPICTfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...
imagemagick:encoder_pict_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5702521957384192 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
imagemagick:ping_gif_fuzzer: Use-of-uninitialized-value in InterpretLocaleValue
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5117184281411584 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pinggiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
DEBIAN-CVE-2019-15140
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...
UBUNTU-CVE-2019-15140
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...