Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. Memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values allow an attacker to crash the application...

UBUNTU-CVE-2020-27772

A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned int. This would most likely lead to an impact to application availability, but could...

UBUNTU-CVE-2020-27762

A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, but could...

CVE-2020-25665

A flaw was found in the PALM image coder at coders/palm.c where it makes an improper call to AcquireQuantumMemory in the WritePALMImage routine because it needs to be offset by 256. This issue causes an out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to...

CVE-2020-27753

There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported tha...

imagemagick: memory leak in function DecodeImage in coders/pcd.c

In ImageMagick before 7.0.8-25, some memory leaks exist in DecodeImage in coders/pcd.c...

ImageMagick: Memory leak in WriteTIFFImage

ImageMagick version 7.0.7-28 contains a memory leak in WriteTIFFImage in coders/tiff.c...

ImageMagick: memory leak in DecodeImage in coders/pcd.c

ImageMagick 7.0.8-4 has a memory leak in DecodeImage in coders/pcd.c...

ImageMagick: memory leak in WriteMSLImage of coders/msl.c

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31...

ImageMagick: heap-based buffer over-read in the function WritePNMImage of coders/pnm.c leading to DoS or information disclosure

In ImageMagick 7.0.8-40 Q16, there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c, which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c...

ImageMagick: CPU exhaustion vulnerability in function ReadDDSInfo in coders/dds.c

ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service...

graphicsmagick:coder_PICT_fuzzer: Heap-buffer-overflow in DecodeImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5649205997862912 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPICTfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...

PT-2019-5895 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-43 Q16 Description: The issue is related to a heap-based buffer overflow in the WriteSGIImage function of coders/sgi.c. This can be exploited by a remote attacker to access confidential data, compromise data integrit...

PT-2020-16154 · Imagemagick +3 · Imagemagick +3

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.10-68 and 7.0.8-68 Description: The issue arises from an improper call to AcquireVirtualMemory and memset in the WriteOnePNGImage function of the PNG coder, allowing for an out-of-bounds write when...

The vulnerability of the `readOneJNGImage` function (coders/png.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to execute arbitrary code.

The vulnerability of the readOneJNGImage function coders/png.c in the cross-platform library for working with graphics, GraphicsMagick, is related to a buffer overflow exploit. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the `ReadJNGImage` and `ReadOneJNGImage` functions (coders/png.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to execute arbitrary code.

The vulnerability of the ReadJNGImage and ReadOneJNGImage functions coders/png.c in the cross-platform graphics library GraphicsMagick is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created...

The vulnerability of the ReadOneJNGImage function (coders/png.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to execute arbitrary code.

The vulnerability of the ReadOneJNGImage function coders/png.c in the cross-platform library for working with graphics, GraphicsMagick, is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the coders/wpg.c component in the cross-platform library for working with GraphicsMagick allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the coders/wpg.c component in the cross-platform library for working with GraphicsMagick arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

CVE-2019-17541

ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c...

PT-2019-5853 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: The issue is related to the WriteOnePNGImage function from coders/png.c the PNG coder which has a for loop with an improper exit condition. This can allow an out-of-bounds READ via...