CVE-2019-7397

In ImageMagick before 7.0.8-25 and GraphicsMagick through 1.3.31, several memory leaks exist in WritePDFImage in coders/pdf.c...

openSUSE Security Update : GraphicsMagick (openSUSE-2019-16)

This update for GraphicsMagick fixes the following issue : Security issue fixed : - CVE-2018-20467: Fixed infinite loop in coders/bmp.c boo1120381 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Upda...

Security update for GraphicsMagick (moderate)

This update for GraphicsMagick fixes the following issues: Security issues fixed: - CVE-2018-20184: Fixed heap-based buffer overflow in the WriteTGAImage function of tga.c bsc1119822 - CVE-2018-20189: Fixed denial of service vulnerability in ReadDIBImage function of coders/dib.c bsc1119790...

CVE-2018-20467: Loop with Unreachable Exit Condition

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

Information disclosure

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

CVE-2018-20189

GraphicsMagick 1.3.31 is affected by CVE-2018-20189 in the ReadDIBImage function (coders/dib.c). A crafted DIB image that exploits direct pixel values with colormapping (not supported beyond 8-bits/sample) can trigger missing indexes initialization, causing a crash and denial of service. No furth...

CVE-2018-20189: Improper Input Validation

In GraphicsMagick 1.3.31, the ReadDIBImage function of coders/dib.c has a vulnerability allowing a crash and denial of service via a dib file that is crafted to appear with direct pixel values and also colormapping which is not available beyond 8-bits/sample, and therefore lacks indexes...

ImageMagick Denial of Service Vulnerability (CNVD-2018-26702)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'ReadBGRImage' function in the coders/bgr.c file in ImageMagick version...

CVE-2018-18544

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31...

CVE-2018-18544

CVE-2018-18544 is a memory‑leak vulnerability in ImageMagick: the WriteMSLImage function (coders/msl.c) in ImageMagick 7.0.8-13 Q16, and the ProcessMSLScript function in GraphicsMagick prior to 1.3.31, leak memory. The connected documents do not provide exploit details, impact beyond memory leaka...

CVE-2018-18544: Missing Release of Resource after Effective Lifetime

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31...

PT-2018-14504

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.0.8 through 7.0.13 GraphicsMagick versions prior to 1.3.31 Description The issue is related to a memory leak in the WriteMSLImage function of coders/msl.c in ImageMagick and the ProcessMSLScript function of coders/msl.c ...

CVE-2018-18544

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31...

[SECURITY] [DSA 4316-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4316-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 12, 2018 https://www.debian.org/security/faq -...

Heap overflow

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

CVE-2018-18024

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

CVE-2018-18023

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the SVGStripString function of coders/svg.c, which allows attackers to cause a denial of service via a crafted SVG image file...

CVE-2018-18025

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...

CVE-2018-18024: Loop with Unreachable Exit Condition

In ImageMagick 7.0.8-13 Q16, there is an infinite loop in the ReadBMPImage function of the coders/bmp.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted bmp file...

CVE-2018-18025: Out-of-bounds Read

In ImageMagick 7.0.8-13 Q16, there is a heap-based buffer over-read in the EncodeImage function of coders/pict.c, which allows attackers to cause a denial of service via a crafted SVG image file...