CVE-2017-16546

The ReadWPGImage function in coders/wpg.c in ImageMagick 7.0.7-9 does not properly validate the colormap index in a WPG palette, which allows remote attackers to cause a denial of service use of uninitialized data or invalid memory allocation or possibly have unspecified other impact via a...

ALPINE-CVE-2017-15286

SQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to consider certain cases where sqlite3steppStmt==SQLITEROW is false and a data structure is never initialized...

CVE-2017-15185

plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbisblockclear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service application crash via a crafted file...

DEBIAN-CVE-2017-15185

plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbisblockclear function with uninitialized data upon detection of invalid input, which allows remote attackers to cause a denial of service application crash via a crafted file...

PT-2017-13878

Name of the Vulnerable Software and Affected Versions Libmp3splt version 0.9.2 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by providing a crafted file containing invalid input. This is due to the vorbis block clear function from t...

DEBIAN-CVE-2017-14975

The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability because a data structure is not initialized, which allows an attacker to launch a denial of service attack...

DEBIAN-CVE-2017-0380

The rendserviceintroestablished function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.x before 0.3.0.11, 0.3.1.x before 0.3.1.7, and 0.3.2.x before 0.3.2.1-alpha, when SafeLogging is disabled, allows attackers to obtain sensitive information by leveraging access to t...

Linux kernel information disclosure vulnerability (CNVD-2017-25673)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. An information disclosure vulnerability exists in the 'atyfbioctl' function in the drivers/video/fbdev/aty/atyfbbase.c file in Linux kernel 4.12.10 and earlier, which fails to...

DEBIAN-CVE-2017-14156

The atyfbioctl function in drivers/video/fbdev/aty/atyfbbase.c in the Linux kernel through 4.12.10 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel stack memory by reading locations associated with padding bytes...

ImageMagick Information Disclosure Vulnerability (CNVD-2017-25055)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. An information disclosure vulnerability exists in the 'ReadMATImage' function of the ImageMagick coders/mat.c file that does not properly initialize data, which allows remote attackers to...

Information disclosure

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory...

CVE-2017-13143

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory...

CVE-2017-13143

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory...

DEBIAN-CVE-2017-13143

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory...

CVE-2017-13143

CVE-2017-13143: ImageMagick reads MAT files using ReadMATImage in coders/mat.c with uninitialized data, potentially exposing sensitive memory. Affected: ImageMagick 6.x up to 6.9.7-6 and 7.x up to 7.0.4-6. Mitigation/remediation details are not provided in the documents; upgrade to patched releas...

CVE-2017-13143

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory...

UBUNTU-CVE-2017-13143

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory...

CVE-2017-13143

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory...

CVE-2017-13143: Exposure of Sensitive Information to an Unauthorized Actor

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory...

PT-2017-12930

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.7-6 ImageMagick versions 7.x prior to 7.0.4-6 Description The issue is related to the ReadMATImage function in coders/mat.c, which uses uninitialized data. This could potentially allow remote attackers to obta...