CVE-2018-8960

CVE-2018-8960 affects ImageMagick 7.0.7-26 Q16 ReadTIFFImage (coders/tiff.c): memory is not properly restricted during allocation, causing a heap-based buffer over-read. NVD CVSSv3 base score 8.8 (HIGH) with network attack, no user interaction, and impacts to confidentiality/integrity/availabilit...

CVE-2017-18230

GraphicsMagick 1.3.26 is affected by CVE-2017-18230 due to a NULL pointer dereference in ReadCINEONImage (coders/cineon.c), enabling denial of service via crafted files. Debian and Ubuntu advisories (DSA-4321-1, USN-4266-1) indicate fixes are available in newer graphicsmagick packages (e.g., Debi...

CVE-2017-18231

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...

CVE-2017-18220

GraphicsMagick 1.3.26 is affected by CVE-2017-18220 due to a vulnerability in ReadOneJNGImage and ReadJNGImage in coders/png.c that can cause remote denial of service (via crafted files, related to CVE-2017-11403). The CNVD entry and Debian advisories confirm a DoS condition by invoking mishandle...

graphicsmagick/coder_XPM_fuzzer: Use-of-uninitialized-value in GrayscalePseudoClassImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5328903267680256 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderXPMfuzzer Fuzz target binary: coderXPMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

Design/Logic Flaw

An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service segmentation violation via a crafted file...

CVE-2018-7470

An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service segmentation violation via a crafted file...

CVE-2018-7470

CVE-2018-7470 affects ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c can be triggered by a crafted WEBP file to cause a denial of service (segmentation fault). Public references describe a network-remote trigger and do not indicate exploitation status or patched versi...

SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2018:0486-1)

This update for ImageMagick fixes the following issues : - CVE-2017-9407: In ImageMagick, the ReadPALMImage function in palm.c allowed attackers to cause a denial of service memory leak via a crafted file. bsc1042824 - CVE-2017-11448: The ReadJPEGImage function in coders/jpeg.c in ImageMagick...

CVE-2017-15218

ImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c...

ImageMagick memory leak vulnerability (CNVD-2018-01391)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'ReadMATImage' function in the coders/mat.c file in ImageMagick version...

CVE-2017-18027

In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file...

CVE-2018-5357

ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c...

CVE-2018-5358

ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c...

Code injection

In GraphicsMagick 1.3.27, there is an infinite loop and application hang in the ReadBMPImage function coders/bmp.c. Remote attackers could leverage this vulnerability to cause a denial of service via an image file with a crafted bit-field mask value...

CVE-2017-18027

In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow remote attackers to cause a denial of service via a crafted file...

Design/Logic Flaw

ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c...

CVE-2018-5357

ImageMagick 7.0.7-22 Q16 has memory leaks in the ReadDCMImage function in coders/dcm.c...

CVE-2018-5358

ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c...

CVE-2018-5358

ImageMagick 7.0.7-22 Q16 has memory leaks in the EncodeImageAttributes function in coders/json.c, as demonstrated by the ReadPSDLayersInternal function in coders/psd.c...