39 matches found
gimp: Multiple use after free in XCF parser
A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious memory errors, potentially leading to crashes and causing use-after-free issues...
kimageformats:kimgio_xcf_fuzzer: Segv on unknown address with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6420207418015744 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN...
The vulnerability of the GIMP graphic editor, related to copying buffers without checking the input data, allows a hacker to cause a service failure.
The vulnerability of the GIMP graphic editor relates to the copying of buffers without checking the input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created XCF file...
SUSE CVE-2007-4986
Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted 1 .dcm, 2 .dib, 3 .xbm, 4 .xcf, or 5 .xwd image file, which triggers a heap-based buffer overflow...
SUSE CVE-2016-7529
coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted XCF file...
SUSE CVE-2017-12691
The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted file...
SUSE CVE-2017-14449
A double-Free vulnerability exists in the XCF image rendering functionality of SDL2image-2.0.2. A specially crafted XCF image can cause a Double-Free situation to occur. An attacker can display a specially crafted image to trigger this vulnerability...
kimageformats:kimgio_xcf_fuzzer: Segv on unknown address in QPainterPrivate::attachPainterPrivate
Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=5665698529542144 Project: kimageformats Fuzzing Engine: afl Fuzz Target: kimgioxcffuzzer Job Type: aflasankimageformats Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State...
kimageformats:kimgio_xcf_fuzzer: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5641852283518976 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000103e1e000 Crash State: NULL Sanitizer: address ASA...
DEBIAN-CVE-2019-5058
An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2image 2.0.4. A specially crafted XCF image can cause a heap overflow, resulting in code execution. An attacker can display a specially crafted image to trigger this vulnerability...
UBUNTU-CVE-2018-3838
An exploitable information vulnerability exists in the XCF image rendering functionality of Simple DirectMedia Layer SDL2image-2.0.2. A specially crafted XCF image can cause an out-of-bounds read on the heap, resulting in information disclosure. An attacker can display a specially crafted image t...
DEBIAN-CVE-2017-12691
The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted file...
UBUNTU-CVE-2017-12691
The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service memory consumption via a crafted file...
ImageMagick Denial of Service Vulnerability (CNVD-2017-25062)
ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial of service vulnerability exists in the 'loadlevel' function of the ImageMagick coders/xcf.c file, which allows remote attackers to exploit the vulnerability to construct malicious...
UBUNTU-CVE-2016-7529
coders/xcf.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted XCF file...
UBUNTU-CVE-2016-4994
Use-after-free vulnerability in the xcfloadimage function in app/xcf/xcf-load.c in GIMP allows remote attackers to cause a denial of service program crash or possibly execute arbitrary code via a crafted XCF file...
DEBIAN-CVE-2008-1096
The loadtile function in the XCF coder in coders/xcf.c in 1 ImageMagick 6.2.8-0 and 2 GraphicsMagick aka gm 1.1.7 allows user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted .xcf file that triggers an out-of-bounds heap write, possibly...
Fedora Core 4 : gimp-2.2.12-1.fc4 (2006-795)
This new version of GIMP fixes a vulnerability in the loader for the XCF format which is the native image file format for the GIMP. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...
