CVE-2018-14437

ImageMagick 7.0.8-4 has a memory leak in parse8BIM in coders/meta.c...

CVE-2018-14436

ImageMagick 7.0.8-4 has a memory leak in ReadMIFFImage in coders/miff.c...

CVE-2018-14434

ImageMagick 7.0.8-4 has a memory leak for a colormap in WriteMPCImage in coders/mpc.c...

imagemagick/encoder_heic_fuzzer: Use-of-uninitialized-value in transform_4x4_luma_add_16_fallback

Detailed report: https://oss-fuzz.com/testcase?key=6276744838381568 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderheicfuzzer Fuzz target binary: encoderheicfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

imagemagick/ping_dcm_fuzzer: Crash in ReadDCMPixels

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5768274380849152 Project: imagemagick Fuzzer: aflimagemagickpingdcmfuzzer Fuzz target binary: pingdcmfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash...

Debian DSA-4245-1 : imagemagick - security update

This update fixes several vulnerabilities in Imagemagick, a graphical software suite. Various memory handling problems or incomplete input sanitising could result in denial of service or the execution of arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in...

[SECURITY] [DSA 4245-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4245-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 14, 2018 https://www.debian.org/security/faq -...

DSA-4245-1 imagemagick - security update

Bulletin has no description...

imagemagick/rotate_fuzzer: Index-out-of-bounds in LibRaw::subtract_black_internal

Detailed report: https://oss-fuzz.com/testcase?key=6320707435757568 Project: imagemagick Fuzzer: libFuzzerimagemagickrotatefuzzer Fuzz target binary: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

Debian: Security Advisory (DSA-4245-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

pdf-image command injection vulnerability

pdf-image is a package that can use ImageMagick to convert PDF files to png files in Node.js. A command injection vulnerability exists in pdf-image version 2.0.0. An attacker can exploit this vulnerability to execute commands...

imagemagick/encoder_tiff_fuzzer: Stack-buffer-overflow in _TIFFVGetField

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5646197065777152 Project: imagemagick Fuzzer: aflimagemagickencodertifffuzzer Fuzz target binary: encodertifffuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in DrawDashPolygon

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6116844380356608 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

imagemagick/rotate_fuzzer: Index-out-of-bounds in LibRaw::scale_colors_loop

Detailed report: https://oss-fuzz.com/testcase?key=4918130718539776 Project: imagemagick Fuzzer: libFuzzerimagemagickrotatefuzzer Fuzz target binary: rotatefuzzer Job Type: libfuzzerubsanimagemagick Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

Ubuntu: Security Advisory (USN-3711-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : ImageMagick vulnerabilities (USN-3711-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3711-1 advisory. It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using...

imagemagick/encoder_mvg_fuzzer: Heap-buffer-overflow in GetMVGMacros

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6326168570560512 Project: imagemagick Fuzzer: aflimagemagickencodermvgfuzzer Fuzz target binary: encodermvgfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type:...

USN-3711-1 imagemagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of th...

USN-3711-1: ImageMagick vulnerabilities

It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of th...

Debian: Security Advisory (DLA-1394-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...