imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in HeifContext::has_alpha

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5327157381890048 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

graphicsmagick:coder_AVIF_fuzzer: Use-of-uninitialized-value in HeifContext::has_alpha

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4820668783329280 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderAVIFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in HeifContext::has_alpha

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6198545529503744 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

OSV-2023-1129 UNKNOWN READ in HeifPixelImage::overlay

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63990 Crash type: UNKNOWN READ Crash state: HeifPixelImage::overlay HeifContext::decodeoverlayimage HeifContext::decodeimageplanar...

PT-2023-35570 · Unknown · Heifcontext

Name of the Vulnerable Software and Affected Versions: HeifContext affected versions not specified Description: The issue is related to a crash in the HeifPixelImage overlay function, specifically in the HeifContext decode overlay image and decode image planar functions. Recommendations: At the...

OSV-2023-736 Heap-buffer-overflow in HeifContext::interpret_heif_file

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61718 Crash type: Heap-buffer-overflow READ 4 Crash state: HeifContext::interpretheiffile HeifContext::readfrommemory heifcontextreadfrommemory...

libheif:file_fuzzer: Heap-buffer-overflow in HeifContext::interpret_heif_file

Project: https://github.com/strukturag/libheif.git Detailed Report: https://oss-fuzz.com/testcase?key=4674365697163264 Project: libheif Fuzzing Engine: libFuzzer Fuzz Target: filefuzzer Job Type: libfuzzerasanlibheif Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

OSV-2023-332 Heap-buffer-overflow in RegionGeometry_Polygon::parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58183 Crash type: Heap-buffer-overflow READ 1 Crash state: RegionGeometryPolygon::parse RegionItem::parse heif::HeifContext::interpretheiffile...

OSV-2023-330 Heap-buffer-overflow in RegionItem::parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58150 Crash type: Heap-buffer-overflow READ 1 Crash state: RegionItem::parse heif::HeifContext::interpretheiffile heif::HeifContext::readfrommemory...

OSV-2023-328 Heap-buffer-overflow in RegionItem::parse

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58152 Crash type: Heap-buffer-overflow READ 1 Crash state: RegionItem::parse heif::HeifContext::interpretheiffile heif::HeifContext::read...

OSV-2020-1260 Negative-size-param in heif::HeifPixelImage::fill_RGB_16bit

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13563 Crash type: Negative-size-param Crash state: heif::HeifPixelImage::fillRGB16bit heif::HeifContext::decodeoverlayimage heif::HeifContext::decodeimage...

PT-2020-21796

Name of the Vulnerable Software and Affected Versions heif affected versions not specified Description A crash occurs due to a negative-size-param issue. The crash happens in the heif::HeifPixelImage::fill RGB 16bit function, which is called by heif::HeifContext::decode overlay image and...

Design/Logic Flaw

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::setalphachannel in heifcontext.h because heifcontext.cc mishandles references to non-existing alpha images...

CVE-2019-11471

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::setalphachannel in heifcontext.h because heifcontext.cc mishandles references to non-existing alpha images...

PT-2019-12329

Name of the Vulnerable Software and Affected Versions libheif version 1.4.0 Description The issue is related to a use-after-free error in the heif::HeifContext::Image::set alpha channel function, located in heif context.h, due to mishandling of references to non-existing alpha images in heif...

CVE-2019-11471: Use After Free

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image::setalphachannel in heifcontext.h because heifcontext.cc mishandles references to non-existing alpha images...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in heif::HeifContext::decode_overlay_image

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5171925214035968 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in heif::HeifContext::decode_full_grid_image

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5362068734607360 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...