imagemagick:ping_tiff_fuzzer: Stack-buffer-overflow in _TIFFVGetField

Detailed Report: https://oss-fuzz.com/testcase?key=5748561614733312 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingtifffuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 4 Crash Address: 0xff974750 Crash State: TIFFVGetField...

imagemagick:rotate_fuzzer: Index-out-of-bounds in LibRaw::scale_colors_loop

Detailed Report: https://oss-fuzz.com/testcase?key=5131755925536768 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: LibRaw::scalecolorsloop LibRaw::scalecolo...

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2019:2896-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage bsc1146213. CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser bsc1146212. CVE-2019-15141: Fixed a divide-by-zero vulnerabili...

SUSE-SU-2019:2896-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage bsc1146213. - CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser bsc1146212. - CVE-2019-15141: Fixed a divide-by-zero...

imagemagick:crop_fuzzer: Index-out-of-bounds in LibRaw::adobe_coeff

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5684491775639552 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: cropfuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address:...

imagemagick:encoder_mvg_fuzzer: Heap-buffer-overflow in TraceStrokePolygon

Detailed Report: https://oss-fuzz.com/testcase?key=5748620620201984 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encodermvgfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0xf080c9f0 Crash State:...

imagemagick:ping_miff_fuzzer: Heap-buffer-overflow in PushDoublePixel

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5700086448783360 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmifffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Cras...

CVE-2019-15140

coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...

CVE-2019-15141

WriteTIFFImage in coders/tiff.c in ImageMagick 7.0.8-43 Q16 allows attackers to cause a denial-of-service application crash resulting from a heap-based buffer over-read via a crafted TIFF image file, related to TIFFRewriteDirectory, TIFFWriteDirectory, TIFFWriteDirectorySec, and...

CVE-2019-15139

The XWD image X Window System window dumping file parsing component in ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service application crash resulting from an out-of-bounds Read in ReadXWDImage in coders/xwd.c by crafting a corrupted XWD image file, a different vulnerability th...

imagemagick:ping_dng_fuzzer: Heap-buffer-overflow in LibRaw::sony_decrypt

Detailed Report: https://oss-fuzz.com/testcase?key=5632223331483648 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingdngfuzzer Job Type: libfuzzerasani386imagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0xf5ff98e1 Crash State: LibRaw::sonydecryp...

CVE-2019-17541

ImageMagick before 7.0.8-55 has a use-after-free in DestroyStringInfo in MagickCore/string.c because the error manager is mishandled in coders/jpeg.c...

CVE-2019-17547

In ImageMagick before 7.0.8-62, TraceBezier in MagickCore/draw.c has a use-after-free...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2019:2785-1)

This update for ImageMagick fixes the following issues : Security issues fixed : CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage. bsc1146213 CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser. bsc1146212 CVE-2019-15141: Fixed a divide-by-zero vulnerabili...

SUSE-SU-2019:2785-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-15139: Fixed a denial-of-service vulnerability in ReadXWDImage. bsc1146213 - CVE-2019-15140: Fixed a use-after-free bug in the Matlab image parser. bsc1146212 - CVE-2019-15141: Fixed a divide-by-zero...

CVE-2019-17540

ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c...

imagemagick:encoder_heic_fuzzer: Use-of-uninitialized-value in decode_CABAC_FL_bypass

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5670034646499328 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

Debian: Security Advisory (DLA-1968-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-1968-1 : imagemagick security update

Multiple vulnerabilities have been found in imagemagick, an image processing toolkit. CVE-2019-11470 Uncontrolled resource consumption caused by insufficiently sanitized image size in ReadCINImage coders/cin.c. This vulnerability might be leveraged by remote attackers to cause denial of service v...

[SECURITY] [DLA 1968-1] imagemagick security update

Package : imagemagick Version : 8:6.8.9.9-5+deb8u18 CVE ID : CVE-2019-11470 CVE-2019-14981 CVE-2019-15139 CVE-2019-15140 Multiple vulnerabilities have been found in imagemagick, an image processing toolkit. CVE-2019-11470 Uncontrolled resource consumption caused by insufficiently sanitized image...