Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-27751 State: PUBLISHED Published: 2020-12-08T00:00:00 Last Updated: 2024-08-04T16:18:45.665Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long long` as well as a shift exponent that is too large for 64-bit type. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analys
other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1891994 - https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27752 State: PUBLISHED Published: 2020-12-08T21:57:16 Last Updated: 2024-08-04T16:18:45.675Z Vendors: n/a Products: ImageMagick Problem Types: CWE-122 Description: A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data integrity as well. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894226
CVE ID: CVE-2020-27753 State: PUBLISHED Published: 2020-12-08T21:57:20 Last Updated: 2024-08-04T16:18:45.843Z Vendors: n/a Products: ImageMagick Problem Types: CWE-401 Description: There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported that the issues were in `AcquireMagickMemory()` because that is where LeakSanitizer detected the leaks, but the patch resolves issues in the MIFF coder, which incorrectly handles data being passed to `AcquireMagickMemory()`.
ut the patch resolves issues in the MIFF coder, which incorrectly handles data being passed to `AcquireMagickMemory()`. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894229
CVE ID: CVE-2020-27754 State: PUBLISHED Published: 2020-12-08T00:00:00 Last Updated: 2024-08-04T16:18:45.822Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects ImageMagick versions prior to 6.9.10-69 and 7.0.8-69. Additional Analyst Notes: - CVE Program Container: References: - https://bugz
versions prior to 6.9.10-69 and 7.0.8-69. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894231 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27755 State: PUBLISHED Published: 2020-12-08T21:57:25 Last Updated: 2024-08-04T16:18:45.546Z Vendors: n/a Products: ImageMagick Problem Types: CWE-401 Description: in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size does not reset the size in the event there is an invalid size. The patch resets the depth to a proper size before throwing an exception. The memory leak can be triggered by a crafted input file that is processed by ImageMagick and could cause an impact to application reliability, such as denial of service. This flaw affects ImageMagick versions prior to 7.0
use an impact to application reliability, such as denial of service. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894232
CVE ID: CVE-2020-27756 State: PUBLISHED Published: 2020-12-08T00:00:00 Last Updated: 2024-08-04T16:18:45.709Z Vendors: n/a Products: ImageMagick Problem Types: CWE-369 Description: In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined behavior. This flaw can be triggered by a crafted input file processed by ImageMagick and could impact application availability. The patch uses multiplication in addition to the function `PerceptibleReciprocal()` in order to prevent such divide-by-zero conditions. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Conta
-zero conditions. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894233 - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27757 State: PUBLISHED Published: 2020-12-08T00:00:00 Last Updated: 2024-08-04T16:18:45.665Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by ImageMagick. Red Hat Product Security marked this as Low because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions pr
impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 7.0.8-68. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894234 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27758 State: PUBLISHED Published: 2020-12-08T00:00:00 Last Updated: 2024-08-04T16:18:45.841Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long long`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/
ersions prior to 7.0.8-68. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894236 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27759 State: PUBLISHED Published: 2020-12-03T00:00:00 Last Updated: 2024-08-04T16:18:45.671Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: In IntensityCompare() of /MagickCore/quantize.c, a double value was being casted to int and returned, which in some cases caused a value outside the range of type `int` to be returned. The flaw could be triggered by a crafted input file under certain conditions when processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior
ct to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 7.0.8-68. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894238 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27760 State: PUBLISHED Published: 2020-12-03T00:00:00 Last Updated: 2024-08-04T16:18:45.597Z Vendors: n/a Products: ImageMagick Problem Types: CWE-369 Description: In `GammaImage()` of /MagickCore/enhance.c, depending on the `gamma` value, it's possible to trigger a divide-by-zero condition when a crafted input file is processed by ImageMagick. This could lead to an impact to application availability. The patch uses the `PerceptibleReciprocal()` to prevent the divide-by-zero from occurring. This flaw affects ImageMagick versions prior to ImageMagick 7.0.8-68. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894239
8. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894239 - https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27761 State: PUBLISHED Published: 2020-12-03T00:00:00 Last Updated: 2024-08-04T16:18:45.669Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: WritePALMImage() in /coders/palm.c used size_t casts in several areas of a calculation which could lead to values outside the range of representable type `unsigned long` undefined behavior when a crafted input file was processed by ImageMagick. The patch casts to `ssize_t` instead to avoid this issue. Red Hat Product Security marked the Severity as Low because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versio
o an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to ImageMagick 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894679 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27762 State: PUBLISHED Published: 2020-12-03T00:00:00 Last Updated: 2024-08-04T16:18:45.682Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: A flaw was found in ImageMagick in coders/hdr.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to ImageMagick 7.0.8-68. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redh
ns prior to ImageMagick 7.0.8-68. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894680 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27763 State: PUBLISHED Published: 2020-12-03T00:00:00 Last Updated: 2024-08-04T16:18:45.694Z Vendors: n/a Products: ImageMagick Problem Types: CWE-369 Description: A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894682 -
. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894682 - https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27764 State: PUBLISHED Published: 2020-12-03T00:00:00 Last Updated: 2024-08-04T16:18:45.664Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which causes out-of-range values under some circumstances when a crafted input file is processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was shown in this case. This flaw affects ImageMagick versions prior to 6.9.10-69. Additional Analyst Notes: - CVE Pr
ct was shown in this case. This flaw affects ImageMagick versions prior to 6.9.10-69. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894683 - https://github.com/ImageMagick/ImageMagick6/commit/3e21bc8a58b4ae38d24c7e283837cc279f35b6a5 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27765 State: PUBLISHED Published: 2020-12-04T00:00:00 Last Updated: 2024-08-04T16:18:45.532Z Vendors: n/a Products: ImageMagick Problem Types: CWE-369 Description: A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894684 -
. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894684 - https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27766 State: PUBLISHED Published: 2020-12-04T00:00:00 Last Updated: 2024-08-04T16:18:45.737Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-69. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat
ick versions prior to 7.0.8-69. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894686 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27767 State: PUBLISHED Published: 2020-12-04T00:00:00 Last Updated: 2024-08-04T16:18:45.680Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of types `float` and `unsigned char`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzi
ts ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894687 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27768 State: PUBLISHED Published: 2021-02-23T00:00:00 Last Updated: 2024-08-04T16:18:45.666Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894689 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27769 State: PUBLISHED Published: 2021-05-14T00:00:00 Last Updated: 2024-08-04T16:18:45.696Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894690 - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27770 State: PUBLISHED Published: 2020-12-04T00:00:00 Last Updated: 2024-08-04T16:18:45.691Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1894691 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.de
dhat.com/show_bug.cgi?id=1894691 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27771 State: PUBLISHED Published: 2020-12-04T00:00:00 Last Updated: 2024-08-04T16:18:45.612Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex() to ssize_t type to avoid this bug. This undefined behavior could be triggered when ImageMagick processes a crafted pdf file. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific impact was
ow severity because although it could potentially lead to an impact to application availability, no specific impact was demonstrated in this case. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1898290 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27772 State: PUBLISHED Published: 2020-12-04T00:00:00 Last Updated: 2024-08-04T16:18:45.683Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned int`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bu
s prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1898291 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27773 State: PUBLISHED Published: 2020-12-04T00:00:00 Last Updated: 2024-08-04T16:25:42.454Z Vendors: n/a Products: ImageMagick Problem Types: CWE-369 Description: A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` or division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - ht
flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1898295 - https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27774 State: PUBLISHED Published: 2020-12-04T00:00:00 Last Updated: 2024-08-04T16:25:42.390Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of a too large shift for 64-bit type `ssize_t`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/s
ersions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1898296 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-27775 State: PUBLISHED Published: 2020-12-04T00:00:00 Last Updated: 2024-08-04T16:25:42.909Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/
versions prior to 7.0.9-0. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1898300 - https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html