RHSA-2020:1180 Red Hat Security Advisory: ImageMagick security, bug fix, and enhancement update
ImageMagick: memory leak vulnerability in ReadXWDImage function in coders/xwd.c ImageMagick: memory exhaustion in function ReadTIFFImage causing denial of service ImageMagick: memory exhaustion in function format8BIM causing denial of service ImageMagick: memory leak in ReadPCDImage function in coders/pcd.c ImageMagick: assertion failure in MogrifyImageList function in MagickWand/mogrify.c ImageMagick: memory leak in WriteGIFImage function in coders/gif.c ImageMagick: infinite loop in ReadMIFFImage function in coders/miff.c ImageMagick: infinite loop ReadTXTImage  in function in coders/txt.c ImageMagick: CPU exhaustion vulnerability in function ReadDDSInfo in coders/dds.c ImageMagick: double free in WriteEPTImage function in coders/ept.c ImageMagick: excessive iteration in the DecodeLabImage and EncodeLabImage functions in coders/tiff.c ImageMagick: Infinite loop in coders/png.c:ReadOneMNGImage() allows attackers to cause a denial of service via crafted MNG file ImageMagick: Memory leak in WriteTIFFImage ImageMagick: Memory leak in ReadYCBCRImage ImageMagick: memory leak in ReadDCMImage function in coders/dcm.c ImageMagick: out of bounds write in ReadBMPImage and WriteBMPImage in coders/bmp.c ImageMagick: out of bounds write ReadDIBImage and WriteDIBImage in coders/dib.c ImageMagick: memory leak in the XMagickCommand function in MagickCore/animate.c ImageMagick: memory leak for a colormap in WriteMPCImage in coders/mpc.c ImageMagick: memory leak in DecodeImage in coders/pcd.c ImageMagick: memory leak in ReadMIFFImage in coders/miff.c ImageMagick: memory leak in parse8BIM in coders/meta.c ImageMagick: CPU Exhaustion via crafted input file ImageMagick: NULL pointer dereference in CheckEventLogging function in MagickCore/log.c ImageMagick: memory leak in ReadOneJNGImage function in coders/png.c ImageMagick: out-of-bounds write in InsertRow function in coders/cut.c ImageMagick: missing check for fputc function in multiple files ImageMagick: improper check for length in ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c ImageMagick: Out-of-memory ReadBMPImage of coders/bmp.c and ReadDIBImage of codes/dib.c ImageMagick: reachable assertion in ReadOneJNGImage in coders/png.c ImageMagick: Memory leak in the formatIPTCfromBuffer function in coders/meta.c ImageMagick: memory leak in WritePDBImage in coders/pdb.c ImageMagick: memory leak in ReadBGRImage in coders/bgr.c. ImageMagick: memory leak in WritePCXImage in coders/pcx.c ImageMagick: infinite loop in the ReadBMPImage function of the coders/bmp.c ImageMagick: memory leak in WriteMSLImage of coders/msl.c ImageMagick: infinite loop in coders/bmp.c imagemagick: memory leak in function DecodeImage in coders/pcd.c ImageMagick: Memory leak in the WritePDFImage function in coders/pdf.c ImageMagick: Memory leak in the WriteDIBImage function in coders/dib.c imagemagick: stack-based buffer overflow in function PopHexPixel in coders/ps.c ImageMagick: off-by-one read in formatIPTCfromBuffer function in coders/meta.c ImageMagick: heap-based buffer over-read in WriteTIFFImage of coders/tiff.c leads to denial of service or information disclosure via crafted image file ImageMagick: denial of service in cineon parsing component ImageMagick: denial of service in ReadXWDImage in coders/xwd.c in the XWD image parsing component ImageMagick: heap-based buffer over-read in the function WriteTIFFImage of coders/tiff.c leading to DoS or information disclosure ImageMagick: heap-based buffer over-read in the function WritePNMImage of coders/pnm.c leading to DoS or information disclosure imagemagick: null-pointer dereference in function ReadPANGOImage in coders/pango.c and ReadVIDImage in coders/vid.c causing denial of service imagemagick: memory leak vulnerability in function WriteDPXImage in coders/dpx.c imagemagick: memory leak vulnerability in function ReadPCLImage in coders/pcl.c imagemagick: use of uninitialized value in function ReadPANGOImage in coders/pango.c imagemagick: use of uninitialized value in functionSyncImageSettings in MagickCore/image.c ImageMagick: a memory leak vulnerability in the function ReadBMPImage in coders/bmp.c ImageMagick: a memory leak vulnerability in the function ReadVIFFImage in coders/viff.c ImageMagick: a "use of uninitialized value" vulnerability in the function ReadCUTImage leading to a crash and DoS ImageMagick: heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is mishandled ImageMagick: heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mishandled ImageMagick: heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling columns ImageMagick: memory leaks in AcquireMagickMemory ImageMagick: stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced assignment ImageMagick: stack-based buffer overflow at coders/pnm.c in WritePNMImage because of a misplaced strncpy and an off-by-one error ImageMagick: stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors ImageMagick: heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages because of mishandling rows ImageMagick: memory leaks at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages ImageMagick: memory leaks at AcquireMagickMemory because of an error in MagickWand/mogrify.c ImageMagick: memory leaks at AcquireMagickMemory because of a wand/mogrify.c error ImageMagick: division by zero in RemoveDuplicateLayers in MagickCore/layer.c ImageMagick: use-after-free in magick/blob.c resulting in a denial of service ImageMagick: division by zero in MeanShiftImage in MagickCore/feature.c ImageMagick: out-of-bounds read in ReadXWDImage in coders/xwd.c ImageMagick: Use after free in ReadMATImage in coders/mat.c ImageMagick: heap-based buffer overflow in WriteTIFFImage in coders/tiff.c ImageMagick: memory leak in magick/xwindow.c ImageMagick: memory leak in coders/dps.c ImageMagick: memory leak in coders/dot.c ImageMagick: memory leak in Huffman2DEncodeImage in coders/ps2.c ImageMagick: memory leak in Huffman2DEncodeImage in coders/ps3.c ImageMagick: memory leak in coders/dot.c ImageMagick: heap-based buffer overflow in ReadPSInfo in coders/ps.c ImageMagick: Use after free in ReadICCProfile function in coders/jpeg.c ImageMagick: heap-based buffer overflow in WriteSGIImage in coders/sgi.c ImageMagick: heap-based buffer over-read in WritePNGImage in coders/png.c
CVSS v3.1 score: 3.3
CVSS v3.0 score: 7.8