2028 matches found
CVE-2018-8804: Double Free
WriteEPTImage in coders/ept.c in ImageMagick 7.0.7-25 Q16 allows remote attackers to cause a denial of service MagickCore/memory.c double free and application crash or possibly have unspecified other impact via a crafted file...
CVE-2017-18230
GraphicsMagick 1.3.26 is affected by CVE-2017-18230 due to a NULL pointer dereference in ReadCINEONImage (coders/cineon.c), enabling denial of service via crafted files. Debian and Ubuntu advisories (DSA-4321-1, USN-4266-1) indicate fixes are available in newer graphicsmagick packages (e.g., Debi...
CVE-2017-18231
An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...
CVE-2017-18229: Allocation of Resources Without Limits or Throttling
An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile...
CVE-2017-18231: NULL Pointer Dereference
An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...
CVE-2017-18230: NULL Pointer Dereference
An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file...
CVE-2017-18220
GraphicsMagick 1.3.26 is affected by CVE-2017-18220 due to a vulnerability in ReadOneJNGImage and ReadJNGImage in coders/png.c that can cause remote denial of service (via crafted files, related to CVE-2017-11403). The CNVD entry and Debian advisories confirm a DoS condition by invoking mishandle...
CVE-2017-18219: Allocation of Resources Without Limits or Throttling
An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large pngpixels array allocation...
CVE-2017-18220: Use After Free
The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...
graphicsmagick/coder_XPM_fuzzer: Use-of-uninitialized-value in GrayscalePseudoClassImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5328903267680256 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderXPMfuzzer Fuzz target binary: coderXPMfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...
Design/Logic Flaw
An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service segmentation violation via a crafted file...
CVE-2018-7470
An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service segmentation violation via a crafted file...
CVE-2018-7470
CVE-2018-7470 affects ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c can be triggered by a crafted WEBP file to cause a denial of service (segmentation fault). Public references describe a network-remote trigger and do not indicate exploitation status or patched versi...
CVE-2018-7470: Improper Restriction of Operations within the Bounds of a Memory Buffer
An issue was discovered in ImageMagick 7.0.7-22 Q16. The IsWEBPImageLossless function in coders/webp.c allows attackers to cause a denial of service segmentation violation via a crafted file...
CVE-2018-7443: Allocation of Resources Without Limits or Throttling
The ReadTIFFImage function in coders/tiff.c in ImageMagick 7.0.7-23 Q16 does not properly validate the amount of image data in a file, which allows remote attackers to cause a denial of service memory allocation failure in the AcquireMagickMemory function in MagickCore/memory.c...
PT-2018-3698
Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.7-23 Q16 Description The issue is related to the ReadTIFFImage function in the coders/tiff.c component, which does not properly validate the amount of image data in a file. This allows remote attackers to cause a denial...
SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2018:0486-1)
This update for ImageMagick fixes the following issues : - CVE-2017-9407: In ImageMagick, the ReadPALMImage function in palm.c allowed attackers to cause a denial of service memory leak via a crafted file. bsc1042824 - CVE-2017-11448: The ReadJPEGImage function in coders/jpeg.c in ImageMagick...
CVE-2018-6405: Missing Release of Resource after Effective Lifetime
In the ReadDCMImage function in coders/dcm.c in ImageMagick before 7.0.7-23, each redmap, greenmap, and bluemap variable can be overwritten by a new pointer. The previous pointer is lost, which leads to a memory leak. This allows remote attackers to cause a denial of service...
PT-2018-17536
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.7-23 Description The issue is related to a memory leak in the ReadDCMImage function. This function is located in coders/dcm.c. The memory leak occurs because the redmap, greenmap, and bluemap variables can be...
