Lucene search
+L

2506 matches found

CVE
CVE
•added 2020/12/04 12:00 a.m.•297 views

CVE-2020-27772

CVE-2020-27772 affects ImageMagick. A flaw in coders/bmp.c lets an attacker craft a BMP file that processed by ImageMagick could trigger undefined behavior in the form of values outside the range of unsigned int, most likely impacting availability. The issue applies to ImageMagick versions prior ...

4.3CVSS4.6AI score0.01138EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/04 12:00 a.m.•2 views

CVE-2020-27772: Integer Overflow or Wraparound

A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned int. This would most likely lead to an impact to application availability, but could...

4.3CVSS5.2AI score0.01138EPSS
SaveExploits1References3
Mend
Mend
•added 2020/12/04 12:00 a.m.•2 views

CVE-2020-27772

A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned int. This would most likely lead to an impact to application availability, but could...

4.8CVSS0.01138EPSS
SaveExploits1References6
Prion
Prion
•added 2020/12/03 5:15 p.m.•27 views

Input validation

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

4.3CVSS3.5AI score0.01088EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
•added 2020/12/03 12:00 a.m.•53 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

5AI score0.01088EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/03 12:00 a.m.•3 views

CVE-2020-27762: Integer Overflow or Wraparound

A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, but could...

5.5CVSS5.2AI score0.01104EPSS
SaveExploits0References3
Mend
Mend
•added 2020/12/03 12:00 a.m.•2 views

CVE-2020-27762

A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, but could...

6.8CVSS0.01104EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2020/11/24 7:54 p.m.•39 views

CVE-2020-27758

A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long long. This would most likely lead to an impact to application availability, but...

4.3CVSS3.1AI score0.01138EPSS
SaveExploits1References3
OSV
OSV
•added 2020/11/20 4:15 p.m.•13 views

UBUNTU-CVE-2020-19667

Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7...

7.8CVSS7.2AI score0.01652EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2020/11/20 12:00 a.m.•67 views

CVE-2020-19667

Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7...

7.7AI score0.01652EPSS
SaveExploits1References3
CVE
CVE
•added 2020/11/20 12:00 a.m.•252 views

CVE-2020-19667

CVE-2020-19667: ImageMagick 7.0.10-7 contains a stack-based buffer overflow and unconditional jump in ReadXPMImage (coders/xpm.c). This CVE entry is based on the description for ImageMagick; exploitation details or mitigation are not provided in the connected documents.

7.8CVSS7.6AI score0.01652EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/20 12:00 a.m.•2 views

CVE-2020-19667: Out-of-bounds Write

Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7...

7.8CVSS5.9AI score0.01652EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2020/11/20 12:00 a.m.•109 views

CVE-2020-19667

Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7...

7.8CVSS7.8AI score0.01652EPSS
SaveExploits1
Mend
Mend
•added 2020/11/20 12:00 a.m.•2 views

CVE-2020-19667

Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7...

8.5CVSS0.01652EPSS
SaveExploits1References7
Debian CVE
Debian CVE
•added 2020/11/20 12:00 a.m.•74 views

CVE-2020-19667

Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7...

7.8CVSS7.4AI score0.01652EPSS
SaveExploits1
Veracode
Veracode
•added 2020/09/21 6:38 a.m.•49 views

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a NULL pointer dereference in the WritePCLImage function in coders/pcl.c during writes of monochrome images...

9.8CVSS3.3AI score0.02095EPSS
SaveExploits0References3Affected Software1
Veracode
Veracode
•added 2020/09/21 6:37 a.m.•41 views

Arbitrary Code Execution

graphicsmagick is vulnerable to arbitrary code execution. The vulnerability exists through a heap overflow in the WriteRGBImage function in coders/rgb.c when processing multiple frames that have non-identical widths...

9.8CVSS2.6AI score0.0309EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2020/09/21 6:34 a.m.•42 views

Denial Of Service (DoS)

graphicsmagick is vulnerable to denial of service DoS. The vulnerability exists through the length field in a header, which is passed into the ReadSUNImage function in coders/sun.c...

6.5CVSS2.1AI score0.02296EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2020/09/21 6:33 a.m.•30 views

Buffer Over-read

graphicsmagick:xenial is vulnerable to buffer over-read. The ReadSUNImage function in coders/sun.c has a colormap heap-based buffer over-read...

8.8CVSS3.5AI score0.02305EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
•added 2020/09/21 6:31 a.m.•38 views

Buffer Over-read

GraphicsMagick is vulnerable to a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached...

8.8CVSS2.9AI score0.01827EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder