Lucene search
+L

42 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•11 views

Astra Linux – Vulnerability in imagemagick

The PALM image coder in coders/palm.c makes an improper call to AcquireQuantumMemory in the routine WritePALMImage. This call requires an offset of 256 bytes. This could lead to a out-of-bounds read later in the routine. The patch adds 256 bytes to bytesperrow in the call to AcquireQuantumMemory...

5.5CVSS6.7AI score0.01028EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/05/11 12:00 a.m.•14 views

Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017551 advisory. The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a...

5.5CVSS6.3AI score0.01028EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•9 views

EUVD-2017-3153

Malware in sbrugna...

6.5CVSS7.3AI score0.01867EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2017-4203

Malware in sbrugna...

8.8CVSS6.8AI score0.01457EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2021/07/06 12:00 a.m.•15 views

The vulnerability of the WritePALMImage() function in the ImageMagick console graphics editor’s /coders/palm.c component, which involves integer overflow of a value, allows a hacker to cause a service failure.

The vulnerability of the WritePALMImage function in the ImageMagick console graphics editor’s /coders/palm.c file is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure...

5.3CVSS6.6AI score0.01088EPSS
SaveExploits0References14Affected Software4
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•40 views

SUSE: Security Advisory (SUSE-SU-2021:0153-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.6AI score0.07508EPSS
SaveExploits26References2
Tenable Nessus
Tenable Nessus
•added 2021/01/25 12:00 a.m.•92 views

openSUSE Security Update : ImageMagick (openSUSE-2021-148)

This update for ImageMagick fixes the following issues : - CVE-2020-19667: Fixed a stack-based buffer overflow in XPM coder could result in a crash bsc1179103. - CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel bsc1179202. - CVE-2020-25665: Fixed a heap-based buffer overflow in...

7.8CVSS6.5AI score0.07508EPSS
SaveExploits27References70
NVD
NVD
•added 2020/12/08 9:15 p.m.•29 views

CVE-2020-25665

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

5.5CVSS5.7AI score0.01028EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/08 12:00 a.m.•3 views

CVE-2020-25665: Heap-based Buffer Overflow

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

5.5CVSS5.5AI score0.01028EPSS
SaveExploits1References3
OSV
OSV
•added 2020/12/03 5:15 p.m.•31 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

3.3CVSS6.2AI score
SaveExploits0References3
NVD
NVD
•added 2020/12/03 5:15 p.m.•24 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

4.3CVSS4.2AI score0.01088EPSS
SaveExploits0References3
Prion
Prion
•added 2020/12/03 5:15 p.m.•26 views

Input validation

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

4.3CVSS3.5AI score0.01088EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
•added 2020/12/03 5:15 p.m.•36 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

4.3CVSS6.8AI score0.01088EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2020/12/03 12:00 a.m.•75 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

4.3CVSS5.9AI score0.01088EPSS
SaveExploits0
CNNVD
CNNVD
•added 2020/12/03 12:00 a.m.•18 views

ImageMagick Studio ImageMagick 输入验证错误漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems...

4.3CVSS6.8AI score0.01088EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2020/12/03 12:00 a.m.•53 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

5AI score0.01088EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/03 12:00 a.m.•2 views

CVE-2020-27761: Integer Overflow or Wraparound

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

4.3CVSS5.2AI score0.01088EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2020/11/24 7:54 p.m.•31 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue...

4.3CVSS2AI score0.01088EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2018/03/02 12:00 a.m.•50 views

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:0581-1)

This update for ImageMagick fixes the following issues : - CVE-2017-9405: A memory leak in the ReadICONImage function was fixed that could lead to DoS via memory exhaustion bsc1042911 - CVE-2017-9407: In ImageMagick, the ReadPALMImage function in palm.c allowed attackers to cause a denial of...

8.8CVSS6.7AI score0.04018EPSS
SaveExploits7References105
Tenable Nessus
Tenable Nessus
•added 2018/02/21 12:00 a.m.•49 views

SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2018:0486-1)

This update for ImageMagick fixes the following issues : - CVE-2017-9407: In ImageMagick, the ReadPALMImage function in palm.c allowed attackers to cause a denial of service memory leak via a crafted file. bsc1042824 - CVE-2017-11448: The ReadJPEGImage function in coders/jpeg.c in ImageMagick...

9.8CVSS6.8AI score0.04018EPSS
SaveExploits3References72
Rows per page
Query Builder