CVE-2017-18231

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...

GraphicsMagick Assignment Failure Vulnerability

GraphicsMagick has been called the Swiss Army Knife of image processing. The short and compact code provides a robust and efficient collection of tools and libraries to handle reading, writing and manipulating images, supporting over 88 image formats, including the important DPX, GIF, JPEG,...

PT-2018-6758

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.26 Description: A NULL pointer dereference issue was discovered in the function ReadCINEONImage in coders/cineon.c. This allows attackers to cause a denial of service via a crafted file. Recommendations: For...

PT-2018-6756

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.26 Description: An allocation failure issue was found in the ReadTIFFImage function, located in coders/tiff.c, which can lead to a denial of service when processing a crafted file. The issue arises because the file...

CVE-2017-18230: NULL Pointer Dereference

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadCINEONImage in coders/cineon.c, which allows attackers to cause a denial of service via a crafted file...

GraphicsMagick null pointer dereference vulnerability (CNVD-2018-07043)

GraphicsMagick has been called the Swiss Army Knife of image processing. The short and compact code provides a robust and efficient collection of tools and libraries to handle reading, writing and manipulating images, supporting over 88 image formats, including the important DPX, GIF, JPEG,...

GraphicsMagick null pointer dereference vulnerability (CNVD-2018-07044)

GraphicsMagick has been called the Swiss Army Knife of image processing. The short and compact code provides a robust and efficient collection of tools and libraries to handle reading, writing and manipulating images, supporting over 88 image formats, including the important DPX, GIF, JPEG,...

PT-2018-6759

Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.3.26 Description: A NULL pointer dereference issue was discovered in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file. Recommendations: For...

CVE-2017-18229: Allocation of Resources Without Limits or Throttling

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadTIFFImage in coders/tiff.c, which allows attackers to cause a denial of service via a crafted file, because file size is not properly used to restrict scanline, strip, and tile...

CVE-2017-18231: NULL Pointer Dereference

An issue was discovered in GraphicsMagick 1.3.26. A NULL pointer dereference vulnerability was found in the function ReadEnhMetaFile in coders/emf.c, which allows attackers to cause a denial of service via a crafted file...

graphicsmagick/coder_PCT_fuzzer: Heap-use-after-free in GetLocaleExceptionMessage

Detailed report: https://oss-fuzz.com/testcase?key=5966407209582592 Project: graphicsmagick Fuzzer: aflgraphicsmagickcoderPCTfuzzer Fuzz target binary: coderPCTfuzzer Job Type: aflasangraphicsmagick Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x6250001a71ed Crash Stat...

Amazon Linux AMI : GraphicsMagick (ALAS-2018-966)

Memory information disclosure in DescribeImage function in magick/describe.c GraphicsMagick is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based buffer over-read. The portion of the code containin...

graphicsmagick/coder_PICON_fuzzer: Use-of-uninitialized-value in Dither

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5184380084420608 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderPICONfuzzer Fuzz target binary: coderPICONfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type...

GraphicsMagick 'ReadOnePNGImage' Function Denial of Service Vulnerability

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'ReadOnePNGImage' function in the coders/png.c file in GraphicsMagick version 1.3.26. An attacker can exploit this...

GraphicsMagick Denial of Service Vulnerability (CNVD-2018-04994)

GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A security vulnerability exists in the 'ReadOneJNGImage' function and the 'ReadJNGImage' function of the coders/png.c file in GraphicsMagick version 1.3.26. ...

CVE-2017-18219

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large pngpixels array allocation...

CVE-2017-18220

The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...

Design/Logic Flaw

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large pngpixels array allocation...

CVE-2017-18219

An issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted file that triggers an attempt at a large pngpixels array allocation...

CVE-2017-18220

The ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of service magick/blob.c CloseBlob use-after-free or possibly have unspecified other impact via a crafted file, a related issue to CVE-2017-11403...