DEBIAN-CVE-2019-11470

The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service uncontrolled resource consumption by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a...

CVE-2019-11472

ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service divide-by-zero error by crafting an XWD image file in which the header indicates neither LSB first nor MSB first...

CVE-2019-11472

ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service divide-by-zero error by crafting an XWD image file in which the header indicates neither LSB first nor MSB first...

CVE-2019-11472

ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service divide-by-zero error by crafting an XWD image file in which the header indicates neither LSB first nor MSB first...

CVE-2019-11472

CVE-2019-11472 affects ImageMagick 7.0.8-41 Q16 and relates to ReadXWDImage in coders/xwd.c. A crafted XWD header that indicates neither LSB first nor MSB first can trigger a divide-by-zero, causing a denial of service. The issue is documented in Amazon Linux 2 advisories (ALAS/ALAS2-2024-2432, 2...

CVE-2019-11470

The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service uncontrolled resource consumption by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a...

CVE-2019-11470

The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service uncontrolled resource consumption by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a...

CVE-2019-11470

ImageMagick 7.0.8-26 Q16 Cineon parsing exposes CVE-2019-11470. Root cause: ReadCINImage in coders/cin.c does not verify sufficient image data, enabling an attacker to craft a Cineon image that causes uncontrolled resource consumption (DoS). The description indicates the issue is triggered by an ...

PT-2019-2626 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-26 Q16 Description: The issue is related to the Cineon parsing component, which allows attackers to cause a denial-of-service due to uncontrolled resource consumption. This can be achieved by creating a Cineon image...

CVE-2019-11472

ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service divide-by-zero error by crafting an XWD image file in which the header indicates neither LSB first nor MSB first...

PT-2019-5874 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick version 7.0.8-41 Q16 Description: The issue is related to a denial-of-service divide-by-zero error in the XWD image parsing component of ImageMagick. This can be triggered by crafting a specific XWD image file where the header doe...

UBUNTU-CVE-2019-11472

ReadXWDImage in coders/xwd.c in the XWD image parsing component of ImageMagick 7.0.8-41 Q16 allows attackers to cause a denial-of-service divide-by-zero error by crafting an XWD image file in which the header indicates neither LSB first nor MSB first...

UBUNTU-CVE-2019-11470

The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service uncontrolled resource consumption by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a...

CVE-2019-11470

The cineon parsing component in ImageMagick 7.0.8-26 Q16 allows attackers to cause a denial-of-service uncontrolled resource consumption by crafting a Cineon image with an incorrect claimed image size. This occurs because ReadCINImage in coders/cin.c lacks a check for insufficient image data in a...

imagemagick/encoder_gif_fuzzer: Heap-buffer-overflow in ParseEntities

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5754243379625984 Project: imagemagick Fuzzer: libFuzzerimagemagickencodergiffuzzer Fuzz target binary: encodergiffuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

CVE-2019-10650

In ImageMagick 7.0.8-36 Q16, there is a heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c, which allows an attacker to cause a denial of service or information disclosure via a crafted image file...

imagemagick/ping_jpg_fuzzer: Use-of-uninitialized-value in ParseInternalDoctype

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5673441966948352 Project: imagemagick Fuzzer: libFuzzerimagemagickpingjpgfuzzer Fuzz target binary: pingjpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

CVE-2019-10649

In ImageMagick 7.0.8-36 Q16, there is a memory leak in the function SVGKeyValuePairs of coders/svg.c, which allows an attacker to cause a denial of service via a crafted image file...

imagemagick/ping_jps_fuzzer: Use-of-uninitialized-value in LocaleNCompare

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5767189224751104 Project: imagemagick Fuzzer: libFuzzerimagemagickpingjpsfuzzer Fuzz target binary: pingjpsfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_jpe_fuzzer: Heap-buffer-overflow in FindNeedleInHaystack

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5687239616495616 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderjpefuzzer Fuzz target binary: encoderjpefuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...