PT-2020-16867

Name of the Vulnerable Software and Affected Versions macOS versions prior to 11.1 Security Update 2020-001 Catalina Security Update 2020-007 Mojave Description Processing a maliciously crafted image may lead to arbitrary code execution. The issue was addressed with improved checks. Recommendatio...

PT-2020-17223

Name of the Vulnerable Software and Affected Versions Apple macOS versions prior to Big Sur 11.1 Apple macOS versions prior to Security Update 2020-001 Catalina Apple macOS versions prior to Security Update 2020-007 Mojave Apple tvOS versions prior to 14.3 Apple iOS versions prior to 14.3 Apple...

PT-2020-17229

Name of the Vulnerable Software and Affected Versions macOS versions prior to Big Sur 11.1 Security Update versions prior to 2020-001 Catalina Security Update versions prior to 2020-007 Mojave Description The issue allows arbitrary code execution when processing a maliciously crafted image. This ...

[SECURITY] Fedora 32 Update: vips-8.8.4-5.fc32

VIPS is an image processing library. It is good for very large images even larger than the amount of RAM in your machine, and for working with color. This package should be installed if you want to use a program compiled against VIPS...

Fedora: Security Advisory for vips (FEDORA-2020-d82261f7b1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-27912

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2020-27912

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2020-27912

An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution...

ImageMagick Studio ImageMagick 安全漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.8-68 that stems...

CVE-2020-27751

ImageMagick vulnerability CVE-2020-27751 affects MagickCore/quantum-export.c. Processing a crafted file can trigger undefined behavior: values outside the range of unsigned long long and a shift exponent too large for 64-bit, with the likely impact on availability. Affected are ImageMagick versio...

Imagemagick Studio ImageMagick Input Validation Error Vulnerability (CNVD-2020-70259)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. An input validation error vulnerability exists in versions prior to ImageMagick...

CVE-2020-27776

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability,...

CVE-2020-27763

A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause...

Mozilla: Variable time processing of cross-origin images during drawImage calls

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Debian DLA-2473-1 : vips security update

In VIPS, an image processing system, an uninitialized variable which may cause the leakage of remote server path or stack address was fixed. For Debian 9 stretch, this problem has been fixed in version 8.4.5-1+deb9u2. We recommend that you upgrade your vips packages. For the detailed security...

Debian: Security Advisory (DLA-2473-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libvips Information Disclosure Vulnerability

libvips is a demand-driven multi-threaded image processing library. libvips versions prior to 8.8.2 are vulnerable to an information disclosure. The vulnerability stems from imvips2dz in /libvips/libvips/deprecated/imvips2dz.c in libvips having uninitialized variables. An attacker could use this...

macOS 11.0.x < 11.0.1

The remote host is running a version of macOS / Mac OS X that is 11.0.x prior to 11.0.1. It is, therefore, affected by multiple vulnerabilities, including the following: - An out-of-bounds write issue that can lead to unexpected application termination or arbitrary code execution when opening a...

PT-2020-16856 · Apple · Macos Catalina +7

Name of the Vulnerable Software and Affected Versions: macOS Big Sur versions prior to 11.1 macOS Catalina versions prior to Security Update 2020-001 macOS Mojave versions prior to Security Update 2020-007 macOS Big Sur version 11.0.1 iOS versions prior to 14.2 iPadOS versions prior to 14.2 watch...

PT-2020-16852

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.1 macOS Big Sur version 11.0.1 Security Update 2020-001 Catalina Security Update 2020-007 Mojave Description An out-of-bounds write issue was addressed with improved input validation. Processing a maliciously...