Search CVE reports
41 – 50 of 141 results
CVE-2017-17501
Medium prioritySome fixes available 2 of 4
WriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a crafted file.
1 affected package
graphicsmagick
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
graphicsmagick | — | Not affected | Not affected | Not affected | Fixed |
CVE-2017-17500
Medium prioritySome fixes available 2 of 4
ReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType heap-based buffer over-read via a crafted file.
1 affected package
graphicsmagick
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
graphicsmagick | — | Not affected | Not affected | Not affected | Fixed |
CVE-2017-17498
Medium prioritySome fixes available 2 of 4
WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (bit_stream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash) or possibly have unspecified other...
1 affected package
graphicsmagick
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
graphicsmagick | — | Not affected | Not affected | Not affected | Fixed |
CVE-2017-16669
Medium prioritySome fixes available 2 of 4
coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to...
1 affected package
graphicsmagick
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
graphicsmagick | — | Not affected | Not affected | Not affected | Fixed |
CVE-2017-16547
Medium prioritySome fixes available 2 of 4
The DrawImage function in magick/render.c in GraphicsMagick 1.3.26 does not properly look for pop keywords that are associated with push keywords, which allows remote attackers to cause a denial of service (negative strncpy and...
1 affected package
graphicsmagick
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
graphicsmagick | — | Not affected | Not affected | Not affected | Fixed |
CVE-2017-16545
Medium prioritySome fixes available 2 of 4
The ReadWPGImage function in coders/wpg.c in GraphicsMagick 1.3.26 does not properly validate colormapped images, which allows remote attackers to cause a denial of service (ImportIndexQuantumType invalid write and application...
1 affected package
graphicsmagick
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
graphicsmagick | — | Not affected | Not affected | Not affected | Fixed |
CVE-2017-16353
Medium prioritySome fixes available 2 of 4
GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage function of the magick/describe.c file, because of a heap-based buffer over-read. The portion of the code containing...
1 affected package
graphicsmagick
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
graphicsmagick | — | Not affected | Not affected | Not affected | Fixed |
CVE-2017-16352
Medium prioritySome fixes available 2 of 4
GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage() function of the magick/describe.c file. One possible way to trigger the...
1 affected package
graphicsmagick
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
graphicsmagick | — | Not affected | Not affected | Not affected | Fixed |
CVE-2017-15930
Medium prioritySome fixes available 2 of 4
In ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26, a Null Pointer Dereference occurs while transferring JPEG scanlines, related to a PixelPacket pointer.
1 affected package
graphicsmagick
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
graphicsmagick | — | Not affected | Not affected | Not affected | Fixed |
CVE-2017-15277
Medium prioritySome fixes available 14 of 17
ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when processing a GIF file that has neither a global nor local palette. If the affected product is used as a library...
2 affected packages
graphicsmagick, imagemagick
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
---|---|---|---|---|---|
graphicsmagick | — | Not affected | Not affected | Not affected | Fixed |
imagemagick | — | Fixed | Fixed | Fixed | Fixed |