Lucene search
K

9 matches found

OSV
OSV
added 2024/11/25 5:18 p.m.2 views

CLSA-2024-1732555093 Fix CVE(s): CVE-2020-27767

SECURITY UPDATE: Undefined behavior due to values outside range in quantum.h - debian/patches/CVE-2020-27767.patch: Fix quantum.h to include float.h to handle min and max values for Quantum type - debian/patches/CVE-2020-27767-1.patch: Fix ClampToQuantum function to handle negative values correct...

4.3CVSS7AI score0.00619EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 3:52 a.m.1 views

SUSE CVE-2020-27767

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of types float and unsigned char. This would most likely lead to an impact to application...

5.3CVSS6.3AI score0.00619EPSS
Exploits1References13
OSV
OSV
added 2022/06/09 7:19 p.m.3 views

CLSA-2022-1654802345 Fix CVE(s): CVE-2022-28463, CVE-2020-27760

SECURITY UPDATE: Division by zero - debian/patches/CVE-2020-27760.patch: Fix divisions by zeros in magick/enhance.c - CVE-2020-27760 SECURITY UPDATE: Heap-based buffer overflow - debian/patches/CVE-2022-28463.patch: Fix buffer overflow - CVE-2022-28463 Fix several issues with undefined behavior: ...

7.8CVSS7.1AI score0.00609EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2021/07/06 12:0 a.m.1 views

The vulnerability of the MagickCore/quantum.h component of the console-based image editing tool ImageMagick, related to integer overflow of values, allows a hacker to cause a service failure.

The vulnerability of the MagickCore/quantum.h component in the console-based image editing tool ImageMagick is related to integer overflow. Exploiting this vulnerability allows a remote attacker to cause a service failure through a specially created file...

5.3CVSS6.7AI score0.00619EPSS
Exploits1References14Affected Software4
OSV
OSV
added 2021/05/06 11:2 a.m.5 views

OESA-2021-1148 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

6.5CVSS7AI score0.00771EPSS
Exploits11References13
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:0 a.m.1 views

The vulnerabilities of the functions in the files MagickCore/colorspace-private.h and MagickCore/quantum.h of the console-based graphic editor ImageMagick, which contain errors related to division by zero, allow attackers to trigger a denial-of-service attack.

The vulnerability of functions in the MagickCore/colorspace-private.h and MagickCore/quantum.h files of the console-based graphic editor ImageMagick is related to errors in division by zero. Exploiting this vulnerability may allow a malicious actor to cause a service failure...

5.3CVSS6.7AI score0.00609EPSS
Exploits1References13Affected Software7
CNNVD
CNNVD
added 2021/01/18 12:0 a.m.2 views

ImageMagick Studio ImageMagick 输入验证错误漏洞

ImageMagick is a suite of open source image processing software. The software can read, convert or write images in a variety of formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems from an out-of-range representable value range for the unsigned int type o...

4.3CVSS6.8AI score0.00538EPSS
Exploits0References11
OSV
OSV
added 2020/12/04 3:15 p.m.1 views

UBUNTU-CVE-2020-27767

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of types float and unsigned char. This would most likely lead to an impact to application...

3.3CVSS6.7AI score0.00619EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2019/10/03 12:0 a.m.6 views

PT-2019-5726 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-68 Description: A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined...

9.8CVSS6.3AI score0.88528EPSS
Exploits78References371
Rows per page
Query Builder