imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in void transform_idct_add<unsigned char>

Detailed Report: https://oss-fuzz.com/testcase?key=4888325293604864 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: void transformidctadd...

Node.js third-party modules: [imagickal] Remote Code Execution

I would like to report RCE in imagickal It allows to execute arbitrary commands on the victim's PC Module module name: imagickal version: 4.2.0 npm page: https://www.npmjs.com/package/imagickal Module Description node wrapper for ImageMagick commands Module Stats 42 weekly downloads Vulnerability...

imagemagick:encoder_psd_fuzzer: Use-of-uninitialized-value in ClampPixel

Detailed Report: https://oss-fuzz.com/testcase?key=4950960420683776 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpsdfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: ClampPixel CompositeOverImage...

imagemagick:encoder_dng_fuzzer: Use-of-uninitialized-value in LibRaw::ljpeg_diff

Detailed Report: https://oss-fuzz.com/testcase?key=5663580178087936 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::ljpegdiff...

imagemagick:ping_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_sinar_ia

Detailed Report: https://oss-fuzz.com/testcase?key=4967658163011584 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: LibRaw::parsesinaria...

imagemagick:ping_ptif_fuzzer: Use-of-uninitialized-value in std::__1::char_traits<char>::length

Detailed Report: https://oss-fuzz.com/testcase?key=6584683486511104 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingptiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: std::1::chartraits::length...

Debian: Security Advisory (DLA-2333-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2333-1 : imagemagick security update

Several security vulnerabilities were fixed in Imagemagick. Various memory handling problems and cases of missing or incomplete input sanitizing may result in denial of service, memory or CPU exhaustion, information disclosure or potentially the execution of arbitrary code when a malformed image...

[SECURITY] [DLA 2333-1] imagemagick security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2333-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 18, 2020 https://wiki.debian.org/LTS -...

DLA-2333-1 imagemagick - security update

Bulletin has no description...

imagemagick:ping_ttf_fuzzer: Heap-buffer-overflow in ft_smooth_overlap_spans

Detailed Report: https://oss-fuzz.com/testcase?key=5471030328688640 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingttffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7fa32c632194 Crash State: ftsmoothoverlapspa...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists in ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image decoding...

imagemagick:encoder_inline_fuzzer: Heap-buffer-overflow in Fax4Decode

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5697773958332416 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encoderinlinefuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE ...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in RenderMVGContent

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5729350432063488 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

ImageMagick 7.0.9-27 < 7.0.10-17 Heap-buffer-overflow in BlobToStringInfo

The remote Windows host has a version of ImageMagick installed that is 7.0.9-27 prior to 7.0.10-17 It is, therefore, affected by a heap-based buffer over-read vulnerability due to a flaw in BlobToStringInfo in MagickCore/string.c during TIFF image decoding. C Tenable, Inc. include'compat.inc'; if...

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2020-1806)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : ImageMagick (EulerOS-SA-2020-1806)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In ImageMagick 7.0.7-29 and earlier, a missing NULL check in ReadOneJNGImage in coders/png.c allows an attacker to cause a denial of servic...

Amazon Linux AMI : php-pecl-imagick (ALAS-2020-1391)

The version of php-pecl-imagick installed on the remote host is prior to 3.4.4-1.8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1391 advisory. An issue was discovered in ImageMagick 7.0.7. A memory leak vulnerability was found in the function WriteGIFImag...

The vulnerability in the implementation of the WritePDFImage function in ImageMagick and GraphicsMagick graphic editors allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the WritePDFImage function in ImageMagick and GraphicsMagick graphic editors is related to resource management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created image...

imagemagick:encoder_mvg_fuzzer: Heap-buffer-overflow in RenderMVGContent

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5716327751483392 Project: imagemagick Fuzzing Engine: honggfuzz Fuzz Target: encodermvgfuzzer Job Type: honggfuzzasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1...