Lucene search
+L

356 matches found

Veracode
Veracode
•added 2020/04/01 12:39 a.m.•32 views

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS. The attack exists because the function in ReadImage in MagickCore/constitute.c does not properly handle the input matlab image file...

8.8CVSS2.3AI score0.04104EPSS
SaveExploits1References16Affected Software4
OSS-Fuzz
OSS-Fuzz
•added 2020/01/13 3:43 a.m.•32 views

graphicsmagick:coder_PICT_fuzzer: Heap-buffer-overflow in DecodeImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5649205997862912 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderPICTfuzzer Job Type: libfuzzerasangraphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2019/10/14 1:58 a.m.•28 views

imagemagick:encoder_pict_fuzzer: Use-of-uninitialized-value in ConstrainColormapIndex

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5702521957384192 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderpictfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2019/10/14 1:57 a.m.•37 views

imagemagick:ping_gif_fuzzer: Use-of-uninitialized-value in InterpretLocaleValue

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5117184281411584 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pinggiffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

6.8AI score
SaveExploits0Affected Software1
osv_debian
osv_debian
•added 2019/08/18 7:15 p.m.•9 views

DEBIAN-CVE-2019-15140

coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...

8.8CVSS7.2AI score0.04104EPSS
SaveExploits1References1
Prion
Prion
•added 2019/08/18 7:15 p.m.•33 views

Design/Logic Flaw

coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...

6.8CVSS9.3AI score0.04104EPSS
SaveExploits1References8Affected Software1
UbuntuCve
UbuntuCve
•added 2019/08/18 7:15 p.m.•32 views

CVE-2019-15140

coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...

8.8CVSS6.8AI score0.04104EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2019/08/18 7:15 p.m.•34 views

UBUNTU-CVE-2019-15140

coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...

8.8CVSS6.8AI score0.04104EPSS
SaveExploits1References4
CVE
CVE
•added 2019/08/18 6:31 p.m.•279 views

CVE-2019-15140

CVE-2019-15140 affects ImageMagick 7.0.8-43 Q16; a crafted Matlab image file mishandled by ReadImage in MagickCore/constitute.c leads to a use-after-free and application crash (possible other impact) as described in the CVE entry.

8.8CVSS8.1AI score0.04104EPSS
SaveExploits1References8Affected Software1
Mend
Mend
•added 2019/08/18 6:31 p.m.•7 views

CVE-2019-15140

coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...

8.8CVSS0.04104EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/18 12:00 a.m.•9 views

CVE-2019-15140: Use After Free

coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by crafting a Matlab image file that is mishandled in ReadImage in MagickCore/constitute.c...

8.8CVSS7.6AI score0.04104EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/08/18 12:00 a.m.•15 views

PT-2019-5069 · Imagemagick +4 · Imagemagick +4

Name of the Vulnerable Software and Affected Versions: ImageMagick versions 7.0.8-43 Q16 Description: The issue is related to a use-after-free error in the coders/mat.c function of the ImageMagick console graphic editor. This error can be exploited by a remote attacker to gain access to...

9.8CVSS6.5AI score0.05916EPSS
SaveExploits59References408
OSS-Fuzz
OSS-Fuzz
•added 2019/07/02 12:27 p.m.•18 views

imagemagick/encoder_pdf_fuzzer: Use-of-uninitialized-value in ReadPDFInfo

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5629534981849088 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpdffuzzer Fuzz target binary: encoderpdffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

7AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2019/05/22 10:12 p.m.•31 views

graphicsmagick/coder_MVG_fuzzer: Use-of-uninitialized-value in DrawImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=5657696658784256 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderMVGfuzzer Fuzz target binary: coderMVGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2019/04/25 2:16 p.m.•27 views

kimageformats/kimgio_rgb_fuzzer: Use-of-uninitialized-value in SGIImage::readImage

Project: git://anongit.kde.org/kimageformats Detailed report: https://oss-fuzz.com/testcase?key=5642691670441984 Project: kimageformats Fuzzer: libFuzzerkimageformatskimgiorgbfuzzer Fuzz target binary: kimgiorgbfuzzer Job Type: libfuzzermsankimageformats Platform Id: linux Crash Type:...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2019/03/10 11:35 a.m.•30 views

imagemagick/encoder_mat_fuzzer: Heap-use-after-free in ReadImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5721754591297536 Project: imagemagick Fuzzer: libFuzzerimagemagickencodermatfuzzer Fuzz target binary: encodermatfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type:...

6.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/12/27 12:00 a.m.•22 views

GIMP ReadImage Buffer Overflow DoS

The vulnerability of the ReadImage function in the GIMP graphic editor’s plug-ins/common/file-tga.c file is related to the issue of writing out images from memory beyond the buffer boundary when reading RGBA images that contain non-standard pixel bit values. Exploiting this vulnerability can allo...

7.8CVSS6.7AI score0.01337EPSS
SaveExploits0References3Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2018/07/16 2:43 a.m.•25 views

imagemagick/ping_dcm_fuzzer: Crash in ReadDCMPixels

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=5768274380849152 Project: imagemagick Fuzzer: aflimagemagickpingdcmfuzzer Fuzz target binary: pingdcmfuzzer Job Type: aflasanimagemagick Platform Id: linux Crash Type: UNKNOWN READ Crash...

6.8AI score
SaveExploits0Affected Software1
CNVD
CNVD
•added 2018/06/21 12:00 a.m.•24 views

sam2p buffer overflow vulnerability (CNVD-2018-14258)

sam2p is a UNIX command line utility program written in C++ that converts images to PDF and other formats. A buffer overflow vulnerability exists in the 'ReadImage' function of the input-tga.ci file in sam2p version 0.49.4. An attacker could exploit this vulnerability to cause a denial of service...

9.8CVSS9.4AI score0.02142EPSS
SaveExploits1References1
Prion
Prion
•added 2018/06/20 6:29 p.m.•31 views

Heap overflow

There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact...

7.5CVSS9.8AI score0.02142EPSS
SaveExploits1References2Affected Software2
Rows per page
Query Builder