ImageMagick Stack Buffer Overflow Vulnerability

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A stack buffer overflow vulnerability exists in WriteWEBPImage in coders/webp.c in ImageMagick version 7.0.7-16 Q16 x8664 2017-12-21. An attacker can exploit this...

CVE-2017-17880

In ImageMagick 7.0.7-16 Q16 x8664 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBPDECODERABIVERSION check...

CVE-2017-1000126

exiv2 0.26 contains a Stack out of bounds read in webp parser...

Unspecified vulnerability in Exiv2 webp parser

Exiv2 is a set of C++ libraries and command line applications for managing image metadata developed by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in EXIF, IPTC and XMP formats. webp parser is one of the webp format parsers. An unspecified...

CVE-2017-1000126

exiv2 0.26 contains a Stack out of bounds read in webp parser...

PYSEC-2017-115

exiv2 0.26 contains a Stack out of bounds read in webp parser...

Design/Logic Flaw

exiv2 0.26 contains a Stack out of bounds read in webp parser...

CVE-2017-1000126

exiv2 0.26 contains a Stack out of bounds read in webp parser...

CVE-2017-1000126

exiv2 0.26 contains a Stack out of bounds read in webp parser...

PYSEC-2017-115

exiv2 0.26 contains a Stack out of bounds read in webp parser...

CVE-2017-1000126

CVE-2017-1000126 affects exiv2 0.26 with a Stack out-of-bounds read in the WebP parser. Public advisories (openSUSE, Red Hat/Nessus plugins) confirm Exiv2 0.26 as vulnerable. The issue is fixed in newer exiv2 releases (openSUSE/SLE updates reference the 0.26 line being updated to address this). I...

CVE-2017-1000126

exiv2 0.26 contains a Stack out of bounds read in webp parser...

CVE-2017-1000126

exiv2 0.26 contains a Stack out of bounds read in webp parser...

ImageMagick Denial of Service Vulnerability (CNVD-2017-25387)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadWEBPImage' function in the coders/webp.c file in ImageMagick...

ImageMagick memory leak vulnerability (CNVD-2017-25388)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the ReadWEBPImage of the coders/webp.c file in ImageMagick version 7.0.6-5. An...

CVE-2017-14137

ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header...

CVE-2017-14138

ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors...

DEBIAN-CVE-2017-14137

ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header...

CVE-2017-14137

ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header...

UBUNTU-CVE-2017-9994

libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensure that pixfmt is set, which allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecifie...