Lucene search
+L

4411 matches found

osv_cve
osv_cve
•added 2020/12/04 9:15 p.m.•28 views

CVE-2020-27775

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, bu...

3.3CVSS6.1AI score
SaveExploits0References3
osv_debian
osv_debian
•added 2020/12/04 9:15 p.m.•8 views

DEBIAN-CVE-2020-27775

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, bu...

3.3CVSS6.3AI score0.01138EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2020/12/04 9:15 p.m.•32 views

CVE-2020-27775

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, bu...

4.3CVSS6.7AI score0.01138EPSS
SaveExploits1References3
NVD
NVD
•added 2020/12/04 3:15 p.m.•30 views

CVE-2020-27767

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of types float and unsigned char. This would most likely lead to an impact to application...

4.3CVSS4.2AI score0.01138EPSS
SaveExploits1References3
NVD
NVD
•added 2020/12/04 3:15 p.m.•23 views

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

4.3CVSS4.2AI score0.01175EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2020/12/04 3:15 p.m.•5 views

DEBIAN-CVE-2020-27766

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability,...

7.8CVSS7AI score0.01197EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2020/12/04 3:15 p.m.•5 views

DEBIAN-CVE-2020-27767

A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of types float and unsigned char. This would most likely lead to an impact to application...

3.3CVSS6.3AI score0.01138EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/12/04 3:15 p.m.•34 views

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

3.3CVSS6.2AI score
SaveExploits0References3
Prion
Prion
•added 2020/12/04 3:15 p.m.•37 views

Input validation

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

4.3CVSS3.5AI score0.01175EPSS
SaveExploits1References3Affected Software3
Cvelist
Cvelist
•added 2020/12/04 12:00 a.m.•59 views

CVE-2020-27776

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability,...

4.8AI score0.00884EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2020/12/04 12:00 a.m.•23 views

ImageMagick Studio ImageMagick 输入验证错误漏洞

ImageMagick is a software for creating, editing, and composing images that can read, convert, and write images in many formats. A vulnerability exists in MagickCore/statistic.c in versions of ImageMagick prior to 7.0.8-69 that exceeds the range of representable values of type 'unsigned long'. An...

7.8CVSS7AI score0.01197EPSS
SaveExploits1References13
Cvelist
Cvelist
•added 2020/12/04 12:00 a.m.•57 views

CVE-2020-27772

A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned int. This would most likely lead to an impact to application availability, but could...

4.8AI score0.01138EPSS
SaveExploits1References3
CVE
CVE
•added 2020/12/04 12:00 a.m.•311 views

CVE-2020-27771

CVE-2020-27771 affects ImageMagick before 7.0.9-0. In RestoreMSCWarning() of coders/pdf.c, multiple GetPixelIndex() calls could yield values outside the range of unsigned char. The fix casts GetPixelIndex() to ssize_t to prevent undefined behavior when processing crafted PDFs. Red Hat rates this ...

4.3CVSS4.8AI score0.01175EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2020/12/04 12:00 a.m.•92 views

CVE-2020-27771

In RestoreMSCWarning of /coders/pdf.c there are several areas where calls to GetPixelIndex could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex to ssizet type to avoid this bug. This undefined behavior could be...

4.3CVSS5.9AI score0.01175EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2020/12/04 12:00 a.m.•85 views

CVE-2020-27776

A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability,...

4.3CVSS5.7AI score0.00884EPSS
SaveExploits1
UbuntuCve
UbuntuCve
•added 2020/12/03 5:15 p.m.•39 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

4.3CVSS6.8AI score0.01088EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2020/12/03 5:15 p.m.•29 views

UBUNTU-CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

3.3CVSS6.7AI score0.01088EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2020/12/03 5:15 p.m.•21 views

UBUNTU-CVE-2020-27762

A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, but could...

5.5CVSS6.7AI score0.01104EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2020/12/03 12:00 a.m.•23 views

ImageMagick Studio ImageMagick 输入验证错误漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.8-68, which stem...

5.5CVSS6.7AI score0.01104EPSS
SaveExploits0References12
CNNVD
CNNVD
•added 2020/12/03 12:00 a.m.•26 views

ImageMagick Studio ImageMagick 输入验证错误漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems...

4.3CVSS6.8AI score0.01088EPSS
SaveExploits0References10
Rows per page
Query Builder