356 matches found
Denial Of Service (DoS)
ImageMagick is vulnerable to denial of service DoS. The attack exists because the function in ReadImage in MagickCore/constitute.c does not properly handle the input matlab image file...
graphicsmagick:coder_PICT_fuzzer: Heap-buffer-overflow in DecodeImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5649205997862912 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPICTfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...
imagemagick:encoder_pict_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5702521957384192 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...
imagemagick:ping_gif_fuzzer: Use-of-uninitialized-value in InterpretLocaleValue
Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5117184281411584 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pinggiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
DEBIAN-CVE-2019-15140
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...
Design/Logic Flaw
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...
CVE-2019-15140
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...
UBUNTU-CVE-2019-15140
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...
CVE-2019-15140
CVE-2019-15140 affects ImageMagick 7.0.8-43 Q16; a crafted Matlab image file mishandled by ReadImage in MagickCore/constitute.c leads to a use-after-free and application crash (possible other impact) as described in the CVE entry.
CVE-2019-15140
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...
CVE-2019-15140: Use After Free
coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...
PT-2019-5069 · Imagemagick +4 · Imagemagick +4
Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8-43 Q16 Description: The issue is related to a use-after-free error in the coders/mat.c function of the ImageMagick console graphic editor. This error can be exploited by a remote attacker to gain access to...
imagemagick/encoder_pdf_fuzzer: Use-of-uninitialized-value in ReadPDFInfo
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5629534981849088 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpdffuzzer Fuzz target binary: encoderpdffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...
graphicsmagick/coder_MVG_fuzzer: Use-of-uninitialized-value in DrawImage
Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5657696658784256 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...
kimageformats/kimgio_rgb_fuzzer: Use-of-uninitialized-value in SGIImage::readImage
Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5642691670441984 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiorgbfuzzer Fuzz target binary: kimgiorgbfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...
imagemagick/encoder_mat_fuzzer: Heap-use-after-free in ReadImage
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5721754591297536 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermatfuzzer Fuzz target binary: encodermatfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...
GIMP ReadImage Buffer Overflow DoS
The vulnerability of the ReadImage function in the GIMP graphic editor’s plug-ins/common/file-tga.c file is related to the issue of writing out images from memory beyond the buffer boundary when reading RGBA images that contain non-standard pixel bit values. Exploiting this vulnerability can allo...
imagemagick/ping_dcm_fuzzer: Crash in ReadDCMPixels
Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5768274380849152 Project: imagemagick Fuzzer: aflimagemagickpingdcmfuzzer Fuzz target binary: pingdcmfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash...
sam2p buffer overflow vulnerability (CNVD-2018-14258)
sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A buffer overflow vulnerability exists in the 'ReadImage' function of the input-tga.ci file in sam2p version 0.49.4. An attacker could exploit this vulnerability to cause a denial of service...