CVE-2019-13134

CVE-2019-13134 is an ImageMagick memory-leak vulnerability in ReadVIFFImage (coders/viff.c). Affected: ImageMagick releases prior to 7.0.8-50. Impact: potential memory exhaustion leading to DoS if exploited. Mitigation: upgrade to ImageMagick 7.0.8-50 or newer (patched version in the referenced R...

CVE-2019-13134

ImageMagick before 7.0.8-50 has a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c...

openSUSE Security Update : ImageMagick (openSUSE-2018-343)

This update for ImageMagick fixes several issues. These security issues were fixed : - CVE-2018-8804: The WriteEPTImage function allowed remote attackers to cause a denial of service double free and application crash or possibly have unspecified other impact via a crafted file bsc1086011. -...

imagemagick/encoder_viff_fuzzer: Use-of-uninitialized-value in ReadVIFFImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=6609963905449984 Project: imagemagick Fuzzer: libFuzzerimagemagickencodervifffuzzer Fuzz target binary: encodervifffuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

graphicsmagick/coder_VIFF_fuzzer: Use-of-uninitialized-value in ThresholdImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed report: https://oss-fuzz.com/testcase?key=4975558724157440 Project: graphicsmagick Fuzzer: libFuzzergraphicsmagickcoderVIFFfuzzer Fuzz target binary: coderVIFFfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type:...

imagemagick/crop_fuzzer: Use-of-uninitialized-value in ReadVIFFImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4705868739248128 Project: imagemagick Fuzzer: libFuzzerimagemagickcropfuzzer Fuzz target binary: cropfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

imagemagick/encoder_pcds_fuzzer: Use-of-uninitialized-value in ReadVIFFImage

Project: https://github.com/imagemagick/imagemagick.git Detailed report: https://oss-fuzz.com/testcase?key=4766863213985792 Project: imagemagick Fuzzer: libFuzzerimagemagickencoderpcdsfuzzer Fuzz target binary: encoderpcdsfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type:...

CVE-2017-12692

The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted VIFF file...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. The attacks can be launched because the ReadVIFFImage function in coders/viff.c does not properly handle malicious VIFF files, causing memory consumption...

ImageMagick Denial of Service Vulnerability (CNVD-2017-24369)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in ReadVIFFImage in coders/viff.c in ImageMagick version 7.0.6-6, which can b...

CVE-2017-12692

The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted VIFF file...

Design/Logic Flaw

The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted VIFF file...

DEBIAN-CVE-2017-12692

The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted VIFF file...

CVE-2017-12692

The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted VIFF file...

CVE-2017-12692

CVE-2017-12692 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2017-12692

The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted VIFF file...

CVE-2017-12692

The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted VIFF file...

Denial Of Service (DoS)

ImageMagick is vulnerable to a denial of service DoS attacks. A malicious user can pass a VIFF file to the ReadVIFFImage function in coders/viff.c to cause an out-of-bounds read and crash the system...

CVE-2016-7516

The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted VIFF file...

Out-of-bounds

The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted VIFF file...