Lucene search
K

37 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.1 views

Astra Linux - уязвимость в imagemagick

The PALM image coder in coders/palm.c makes an improper call to AcquireQuantumMemory in the routine WritePALMImage. This call requires an offset of 256 bytes. This could lead to a out-of-bounds read later in the routine. The patch adds 256 bytes to bytesperrow in the call to AcquireQuantumMemory...

5.5CVSS6.8AI score0.00252EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.4 views

Unity Linux 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-017551)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017551 advisory. The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a...

5.5CVSS6.3AI score0.00252EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-3153

Malware in sbrugna...

6.5CVSS7.3AI score0.00429EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-4203

Malware in sbrugna...

8.8CVSS6.8AI score0.00208EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.36 views

SUSE: Security Advisory (SUSE-SU-2021:0153-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.6AI score0.6875EPSS
Exploits26References2
Tenable Nessus
Tenable Nessus
added 2021/01/25 12:0 a.m.86 views

openSUSE Security Update : ImageMagick (openSUSE-2021-148)

This update for ImageMagick fixes the following issues : - CVE-2020-19667: Fixed a stack-based buffer overflow in XPM coder could result in a crash bsc1179103. - CVE-2020-25664: Fixed a heap-based buffer overflow in PopShortPixel bsc1179202. - CVE-2020-25665: Fixed a heap-based buffer overflow in...

7.8CVSS6.5AI score0.6875EPSS
Exploits27References70
NVD
NVD
added 2020/12/08 9:15 p.m.11 views

CVE-2020-25665

The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory in routine WritePALMImage because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytesperrow in the call to AcquireQuantumMemory. This could cause...

5.5CVSS5.7AI score0.00252EPSS
Exploits1References3
OSV
OSV
added 2020/12/03 5:15 p.m.16 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

3.3CVSS6.2AI score
Exploits0References3
NVD
NVD
added 2020/12/03 5:15 p.m.15 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

4.3CVSS4.2AI score0.00149EPSS
Exploits0References3
Prion
Prion
added 2020/12/03 5:15 p.m.18 views

Input validation

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

4.3CVSS3.5AI score0.00149EPSS
Exploits0References3Affected Software2
UbuntuCve
UbuntuCve
added 2020/12/03 5:15 p.m.22 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

4.3CVSS6.8AI score0.00149EPSS
Exploits0References3
Cvelist
Cvelist
added 2020/12/03 12:0 a.m.20 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

5AI score0.00149EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2020/12/03 12:0 a.m.33 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue. Re...

4.3CVSS5.9AI score0.00149EPSS
Exploits0
CNNVD
CNNVD
added 2020/12/03 12:0 a.m.2 views

ImageMagick Studio ImageMagick 输入验证错误漏洞

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems...

4.3CVSS6.8AI score0.00149EPSS
Exploits0References10
RedhatCVE
RedhatCVE
added 2020/11/24 7:54 p.m.23 views

CVE-2020-27761

WritePALMImage in /coders/palm.c used sizet casts in several areas of a calculation which could lead to values outside the range of representable type unsigned long undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to ssizet instead to avoid this issue...

4.3CVSS2AI score0.00149EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2018/03/02 12:0 a.m.39 views

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2018:0581-1)

This update for ImageMagick fixes the following issues : - CVE-2017-9405: A memory leak in the ReadICONImage function was fixed that could lead to DoS via memory exhaustion bsc1042911 - CVE-2017-9407: In ImageMagick, the ReadPALMImage function in palm.c allowed attackers to cause a denial of...

8.8CVSS6.7AI score0.01712EPSS
Exploits7References105
Tenable Nessus
Tenable Nessus
added 2018/02/21 12:0 a.m.39 views

SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2018:0486-1)

This update for ImageMagick fixes the following issues : - CVE-2017-9407: In ImageMagick, the ReadPALMImage function in palm.c allowed attackers to cause a denial of service memory leak via a crafted file. bsc1042824 - CVE-2017-11448: The ReadJPEGImage function in coders/jpeg.c in ImageMagick...

9.8CVSS6.8AI score0.01092EPSS
Exploits3References72
RedhatCVE
RedhatCVE
added 2017/08/18 5:48 p.m.18 views

CVE-2017-12664

ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c...

8.8CVSS3.2AI score0.00208EPSS
Exploits0References1
Veracode
Veracode
added 2017/08/08 5:17 a.m.23 views

Memory Leak

ImageMagick is vulnerable to denial of service DoS attacks through a memory leak. A malicious user can cause a memory leak by passing a palm file to WritePALMImage in coders/palm.c...

8.8CVSS7.9AI score0.00208EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2017/08/08 12:0 a.m.3 views

ImageMagick memory leak vulnerability (CNVD-2017-21011)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'WritePALMImage' function in the coders/palm.c file in ImageMagick version...

8.8CVSS6.7AI score0.00208EPSS
Exploits0References1
Rows per page
Query Builder