CVE-2018-8804

WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service MagickCore/memory.c double free and application crash or possibly have unspecified other impact via a crafted file...

CVE-2018-8804: Double Free

WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service MagickCore/memory.c double free and application crash or possibly have unspecified other impact via a crafted file...

PT-2018-3696

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-25 Q16 Description The issue is related to the WriteEPTImage function in the coders/ept.c component of ImageMagick, which allows remote attackers to cause a denial of service, potentially leading to an application cra...

CVE-2017-18230

GraphicsMagick 1.3.26 is affected by CVE-2017-18230 due to a NULL pointer dereference in ReadCINEONImage (coders/cineon.c), enabling denial of service via crafted files. Debian and Ubuntu advisories (DSA-4321-1, USN-4266-1) indicate fixes are available in newer graphicsmagick packages (e.g., Debi...

CVE-2017-18231

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...

PT-2018-6756

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.26 Description: An allocation failure issue was found in the ReadTIFFImage function, located in coders/tiff.c, which can lead to a denial of service when processing a crafted file. The issue arises because the file...

CVE-2017-18229: Allocation of Resources Without Limits or Throttling

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile...

PT-2018-6759

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.26 Description: A NULL pointer dereference issue was discovered in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file. Recommendations: For...

PT-2018-6758

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.26 Description: A NULL pointer dereference issue was discovered in the function ReadCINEONImage in coders/cineon.c. This allows attackers to cause a denial of service via a crafted file. Recommendations: For...

CVE-2017-18231: NULL Pointer Dereference

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-18230: NULL Pointer Dereference

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file...

PT-2018-3699

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-26 Q16 Description The issue is related to the ReadTIFFImage function in coders/tiff.c, which does not properly restrict memory allocation. This leads to a heap-based buffer over-read, potentially allowing a remote...

CVE-2017-18220

GraphicsMagick 1.3.26 is affected by CVE-2017-18220 due to a vulnerability in ReadOneJNGImage and ReadJNGImage in coders/png.c that can cause remote denial of service (via crafted files, related to CVE-2017-11403). The CNVD entry and Debian advisories confirm a DoS condition by invoking mishandle...

PT-2018-6745

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.26 Description: An issue was discovered that allows attackers to cause a denial of service via a crafted file. The problem is related to an allocation failure in the ReadOnePNGImage function in coders/png.c, which...

CVE-2017-18220: Use After Free

The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...

CVE-2017-18219: Allocation of Resources Without Limits or Throttling

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large pngpixels array allocation...

graphicsmagick/coder_XPM_fuzzer: Use-of-uninitialized-value in GrayscalePseudoClassImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5328903267680256 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderXPMfuzzer Fuzz target binary: coderXPMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

Design/Logic Flaw

An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service segmentation violation via a crafted file...

CVE-2018-7470

An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service segmentation violation via a crafted file...

CVE-2018-7470

CVE-2018-7470 affects ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c can be triggered by a crafted WEBP file to cause a denial of service (segmentation fault). Public references describe a network-remote trigger and do not indicate exploitation status or patched versi...