imagemagick/encoder_mat_fuzzer: Heap-use-after-free in ReadImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5721754591297536 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermatfuzzer Fuzz target binary: encodermatfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

ImageMagick 'Magick::Image::read' function memory misreference vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory misreference vulnerability exists in the 'Magick::Image::read' function in the Magick++/lib/Image.cpp file in...

DEBIAN-CVE-2017-17499

ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp...

Double free

ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp...

CVE-2017-17499

ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp...

CVE-2017-17499

ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp...

CVE-2017-17499: Use After Free

ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp...

UBUNTU-CVE-2017-17499

ImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read in Magick++/lib/Image.cpp...

PT-2017-14810

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.9-24 ImageMagick versions 7.x prior to 7.0.7-12 Description The issue is related to a use-after-free in the Magick::Image::read function located in Magick++/lib/Image.cpp. Recommendations For ImageMagick...

CVE-2016-4924

An incorrect permissions vulnerability in Juniper Networks Junos OS on vMX may allow local unprivileged users on a host system read access to vMX or vPFE images and obtain sensitive information contained in them such as private cryptographic keys. This issue was found during internal product...

UBUNTU-CVE-2017-14136

OpenCV Open Source Computer Vision Library 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12597...

PT-2017-13272

Name of the Vulnerable Software and Affected Versions OpenCV Open Source Computer Vision Library version 3.3 Description The issue is an out-of-bounds write error in the FillColorRow1 function in utils.cpp when reading an image file using cv::imread. This error exists due to an incomplete fix for...

DEBIAN-CVE-2017-12605

OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread...

DEBIAN-CVE-2017-12603

OpenCV Open Source Computer Vision Library through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test case...

UBUNTU-CVE-2017-12603

OpenCV Open Source Computer Vision Library through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test case...

UBUNTU-CVE-2017-12601

OpenCV Open Source Computer Vision Library through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmtbmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case...

PT-2017-4216

Name of the Vulnerable Software and Affected Versions OpenCV versions through 3.3 Description The issue is related to an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file using cv::imread. This can allow a remote...

PT-2017-4337

Name of the Vulnerable Software and Affected Versions: OpenCV versions 3.3 and earlier Description: The issue is related to an out-of-bounds write error in the FillColorRow1 function of the utils.cpp component in the OpenCV library. This error occurs when reading an image file using cv::imread...

PT-2017-4341

Name of the Vulnerable Software and Affected Versions: OpenCV versions through 3.3 Description: The issue is related to an out-of-bounds write error in the FillColorRow4 function in utils.cpp when reading an image file using cv::imread. This can potentially allow a remote attacker to access...

PT-2017-4219

Name of the Vulnerable Software and Affected Versions OpenCV versions through 3.3 Description The issue is related to an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread. This allows a remote attacker to access confidential data,...