PT-2019-5860 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: The issue is related to the WritePALMImage function in the /coders/palm.c component of the ImageMagick console graphic editor. It is associated with an integer overflow value. Exploitation of...

Fedora 31 : 1:ImageMagick / rubygem-rmagick (2019-27b9b94805)

Bug fixes and security fixes. Better threading compile time option set. See: https://src.fedoraproject.org/rpms/ImageMagick/pull-request/2 Additional formats enabled. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

PT-2019-6340 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: The issue is related to the ParseMetaGeometry function in the MagickCore/geometry.c component of the ImageMagick console graphic editor. It is caused by an incorrect implementation of the...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in FindNeedleInHaystack

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5653360948019200 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

PT-2019-5857 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: A flaw was found in ImageMagick in coders/txt.c, related to an integer overflow of the value. This issue could allow a remote attacker to cause a denial of service using a specially crafted...

PT-2019-5838 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: The issue is related to a missing check for a 0 value of replace extent in the SubstituteString function, which can cause an offset p to overflow. This could be triggered by a crafted input...

PT-2019-5859 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: The issue is related to the GammaImage function in /MagickCore/enhance.c of ImageMagick, where a divide-by-zero condition can be triggered depending on the gamma value when processing a...

PT-2019-5853 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: The issue is related to the WriteOnePNGImage function from coders/png.c the PNG coder which has a for loop with an improper exit condition. This can allow an out-of-bounds READ via...

imagemagick:ping_jpg_fuzzer: Use-of-uninitialized-value in LocaleNCompare

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5651751306264576 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingjpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

CVE-2019-14981

In ImageMagick 7.x before 7.0.8-41 and 6.x before 6.9.10-41, there is a divide-by-zero vulnerability in the MeanShiftImage function. It allows an attacker to cause a denial of service by sending a crafted file...

CVE-2019-14980

In ImageMagick 7.x before 7.0.8-42 and 6.x before 6.9.10-42, there is a use after free vulnerability in the UnmapBlob function that allows an attacker to cause a denial of service by sending a crafted file...

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in TraceArcPath

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5718991703638016 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

MGASA-2019-0290 Updated libheif packages fix security vulnerability

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image:: setalphachannel in heifcontext.h because heifcontext.cc mishandles references to non-existing alpha images CVE-2019-11471. Also, imagemagick has been updated to 7.0.8.62 to fix various bugs...

Updated libheif packages fix security vulnerability

libheif 1.4.0 has a use-after-free in heif::HeifContext::Image:: setalphachannel in heifcontext.h because heifcontext.cc mishandles references to non-existing alpha images CVE-2019-11471. Also, imagemagick has been updated to 7.0.8.62 to fix various bugs...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The vulnerability exists due to memory leaks in Huffman2DEncodeImage in coders/ps3.c...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The vulnerability exists due to memory leaks in AcquireMagickMemory in MagickCore/memory.c...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The vulnerability exists due to memory leaks in Huffman2DEncodeImage of coders/ps2.c...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The vulnerability exists due to memory leaks in coders/dot.c...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The attack is due to memory leaks in the magick/xwindow/XCreateImage function...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The attack exists because it does not free the memory properly for image variable used in XCreateImage function in coders/dps.c, causing memory leakage...