Design/Logic Flaw

A floating point math calculation in ScaleAnyToQuantum of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by...

CVE-2020-27752

A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data...

UBUNTU-CVE-2020-25665

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

PT-2020-6376 · Schneider Electric · Modicon M340 +2

Name of the Vulnerable Software and Affected Versions: Modicon M340 versions affected versions not specified Modicon Quantum versions affected versions not specified Modicon Premium versions affected versions not specified Description: The issue is related to the lack of authentication for a...

PT-2020-6371 · Schneider Electric · Modicon M340 +2

Name of the Vulnerable Software and Affected Versions: Modicon M340, Modicon Quantum, Modicon Premium affected versions not specified Description: The issue is related to insufficient checking of unusual or exceptional conditions in the software of programmable logic controllers. This could allow...

CVE-2020-27751: Integer Overflow or Wraparound

A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long long as well as a shift exponent that is too large for 64-bit type...

CVE-2020-27752: Heap-based Buffer Overflow

A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data...

PT-2020-5512

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.0.9-0 Description A flaw was found in ImageMagick in MagickCore/quantum-private.h, which could trigger a heap buffer overflow when an attacker submits a crafted file that is processed by ImageMagick. This would...

CVE-2020-27751

A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long long as well as a shift exponent that is too large for 64-bit type...

PT-2020-6372 · Schneider Electric · Modicon M580 +3

Name of the Vulnerable Software and Affected Versions: Modicon M580 affected versions not specified Modicon M340 affected versions not specified Legacy Controllers Modicon Quantum affected versions not specified Modicon Premium affected versions not specified Description: A vulnerability exists...

ImageMagick Studio ImageMagick 缓冲区错误漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.8-68, which stem...

PT-2020-6330 · Schneider Electric · Modicon M340 +2

Name of the Vulnerable Software and Affected Versions: Modicon M340, Modicon Quantum, Modicon Premium affected versions not specified Description: The issue is related to improper limitation of a pathname to a restricted directory, which could allow a remote attacker to gain unauthorized access t...

CVE-2020-27757: Integer Overflow or Wraparound

A floating point math calculation in ScaleAnyToQuantum of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by...

CVE-2020-27751

A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long long as well as a shift exponent that is too large for 64-bit type...

ImageMagick Studio ImageMagick 输入验证错误漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 7.0.8-68, which stem...

Chinese Breakthrough in Quantum Computing a Warning for Security Teams

China’s top quantum-computer researchers have reported that they have achieved quantum supremacy, i.e., the ability to perform tasks a traditional supercomputer cannot. And while it’s a thrilling development, the inevitable rise of quantum computing means security teams are one step closer to...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists through MagickCore/quantum.h, when a file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. An integer overflow in MagickCore/quantum-private.h allows an attacker to crash the application...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service DoS. The vulnerability exists in the MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker could exploit this vulnerability by providing untrusted input data which may lead to a divide-by-zero runtime error and application crash...

Denial Of Service (DoS)

imagemagick is vulnerable to denial of service. An outside the range of representable values of type unsigned long long bug in MagickCore/quantum-private.h allows an attacker to crash the application...