Lucene search
K

3037 matches found

OSV
OSV
added 2020/12/04 9:15 p.m.12 views

CVE-2020-27775

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, bu...

3.3CVSS6.1AI score
Exploits0References3
NVD
NVD
added 2020/12/04 9:15 p.m.15 views

CVE-2020-27775

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, bu...

4.3CVSS4.1AI score0.01124EPSS
Exploits1References3
OSV
OSV
added 2020/12/04 9:15 p.m.2 views

DEBIAN-CVE-2020-27775

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, bu...

3.3CVSS6.3AI score0.01124EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2020/12/04 9:15 p.m.18 views

CVE-2020-27775

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, bu...

4.3CVSS6.7AI score0.01124EPSS
Exploits1References3
NVD
NVD
added 2020/12/04 3:15 p.m.21 views

CVE-2020-27767

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of types float and unsigned char. This would most likely lead to an impact to application...

4.3CVSS4.2AI score0.01124EPSS
Exploits1References3
NVD
NVD
added 2020/12/04 3:15 p.m.14 views

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

4.3CVSS4.2AI score0.01161EPSS
Exploits1References3
OSV
OSV
added 2020/12/04 3:15 p.m.1 views

DEBIAN-CVE-2020-27766

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability,...

7.8CVSS7AI score0.01183EPSS
Exploits1References1
OSV
OSV
added 2020/12/04 3:15 p.m.2 views

DEBIAN-CVE-2020-27767

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of types float and unsigned char. This would most likely lead to an impact to application...

3.3CVSS6.3AI score0.01124EPSS
Exploits1References1
OSV
OSV
added 2020/12/04 3:15 p.m.23 views

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

3.3CVSS6.2AI score
Exploits0References3
Prion
Prion
added 2020/12/04 3:15 p.m.24 views

Input validation

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

4.3CVSS3.5AI score0.01161EPSS
Exploits1References3Affected Software3
Cvelist
Cvelist
added 2020/12/04 12:0 a.m.19 views

CVE-2020-27776

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability,...

4.8AI score0.00874EPSS
Exploits1References2
Cvelist
Cvelist
added 2020/12/04 12:0 a.m.15 views

CVE-2020-27772

A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned int. This would most likely lead to an impact to application availability, but could...

4.8AI score0.01124EPSS
Exploits1References3
CNNVD
CNNVD
added 2020/12/04 12:0 a.m.4 views

ImageMagick Studio ImageMagick 输入验证错误漏洞

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A vulnerability exists in MagickCore/statistic.c in versions of ImageMagick prior to 7.0.8-69 that exceeds the range of representable values of type 'unsigned long'. An...

7.8CVSS7AI score0.01183EPSS
Exploits1References13
CVE
CVE
added 2020/12/04 12:0 a.m.271 views

CVE-2020-27771

CVE-2020-27771 affects ImageMagick before 7.0.9-0. In RestoreMSCWarning() of coders/pdf.c, multiple GetPixelIndex() calls could yield values outside the range of unsigned char. The fix casts GetPixelIndex() to ssize_t to prevent undefined behavior when processing crafted PDFs. Red Hat rates this ...

4.3CVSS4.8AI score0.01161EPSS
Exploits1References3Affected Software1
Debian CVE
Debian CVE
added 2020/12/04 12:0 a.m.37 views

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

4.3CVSS5.9AI score0.01161EPSS
Exploits1
Debian CVE
Debian CVE
added 2020/12/04 12:0 a.m.36 views

CVE-2020-27776

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability,...

4.3CVSS5.7AI score0.00874EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2020/12/03 5:15 p.m.22 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

4.3CVSS6.8AI score0.01075EPSS
Exploits0References3
OSV
OSV
added 2020/12/03 5:15 p.m.1 views

UBUNTU-CVE-2020-27762

A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, but could...

5.5CVSS6.7AI score0.01091EPSS
Exploits0References5
OSV
OSV
added 2020/12/03 5:15 p.m.2 views

UBUNTU-CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

3.3CVSS6.7AI score0.01075EPSS
Exploits0References4
CNNVD
CNNVD
added 2020/12/03 12:0 a.m.3 views

ImageMagick Studio ImageMagick 输入验证错误漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.8-68, which stem...

5.5CVSS6.7AI score0.01091EPSS
Exploits0References12
Rows per page
Query Builder