imagemagick/rotate_fuzzer: Index-out-of-bounds in LibRaw::subtract_black_internal

Detailed report: https://oss-fuzz.com/testcase?key=5707327297028096 Project: imagemagick Fuzzer: libFuzzerimagemagickrotatefuzzer Fuzz target binary: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

imagemagick/ping_mvg_fuzzer: Use-of-uninitialized-value in ReadCAPTIONImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5707184080420864 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/ping_dng_fuzzer: Use-of-uninitialized-value in LibRaw::parse_sinar_ia

Detailed report: https://oss-fuzz.com/testcase?key=5747962597081088 Project: imagemagick Fuzzer: libFuzzerimagemagickpingdngfuzzer Fuzz target binary: pingdngfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The CPU and memory exhaustion can be caused when a malicious BMP file is input to the coders/bmp.c...

DEBIAN-CVE-2018-20467

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

Input validation

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

CVE-2018-20467

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

CVE-2018-20467

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

CVE-2018-20467

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

CVE-2018-20467

CVE-2018-20467 (ImageMagick) affects the ImageMagick bmp coder. In ImageMagick before 7.0.8-16, an input BMP file can trigger an infinite loop in the bmp.c processing path, causing hang and excessive CPU/memory usage. This may be exploited by remote attackers via a crafted image file to achieve d...

CVE-2018-20467

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

CVE-2018-20467

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

ImageMagick Denial of Service Vulnerability (CNVD-2018-26652)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the coders/bmp.c file in versions prior to ImageMagick 7.0.8-16, which can...

CVE-2018-20467

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

UBUNTU-CVE-2018-20467

In coders/bmp.c in ImageMagick before 7.0.8-16, an input file can result in an infinite loop and hang, with high CPU and memory consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file...

imagemagick/ping_jps_fuzzer: Heap-buffer-overflow in ParseInternalDoctype

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5701330543312896 Project: imagemagick Fuzzer: libFuzzerpingjpsfuzzer Fuzz target binary: pingjpsfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The user can input malicious DIB file to the ReadDIBImage function of coders/dib.c to trigger the attack. This vulnerability also affects GraphicsMagick...

imagemagick/ping_mvg_fuzzer: Use-of-uninitialized-value in StringInfoToHexString

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5717227240685568 Project: imagemagick Fuzzer: libFuzzerimagemagickpingmvgfuzzer Fuzz target binary: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

The vulnerability of the console-based graphic editor ImageMagick, related to improper memory management, allows a hacker to cause a system failure or execute arbitrary code.

The vulnerability of the console-based graphic editor ImageMagick is related to improper memory handling. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code...

imagemagick/encoder_wpg_fuzzer: Use-of-uninitialized-value in SetPixelViaPixelInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5666208397918208 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderwpgfuzzer Fuzz target binary: encoderwpgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...