| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2021-3596 | 4.3 | A NULL pointer dereference flaw was found in ImageMagick in versions prior to 7.0.10-31 in ReadSVGImage() in coders/svg.c. This issue is due to not checking the return value from libxml2's xmlCreatePushParserCtxt() and uses the value directly, which | 2023-03-11 23:15:00 | 2022-02-24 19:15:00 |
| CVE-2020-27769 | 4.3 | In ImageMagick versions before 7.0.9-0, there are outside the range of representable values of type 'float' at MagickCore/quantize.c. | 2023-03-11 23:15:00 | 2021-05-14 20:15:00 |
| CVE-2020-27768 | 4.3 | In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0. | 2023-03-11 23:15:00 | 2021-02-23 04:15:00 |
| CVE-2020-27758 | 4.3 | A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long long`. This would most likely lea | 2023-03-11 23:15:00 | 2020-12-08 22:15:00 |
| CVE-2020-27757 | 4.3 | A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under | 2023-03-11 23:15:00 | 2020-12-08 22:15:00 |
| CVE-2020-27754 | 4.3 | In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPi | 2023-03-11 23:15:00 | 2020-12-08 22:15:00 |
| CVE-2020-27751 | 4.3 | A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long long` as well as a | 2023-03-11 23:15:00 | 2020-12-08 22:15:00 |
| CVE-2020-27750 | 4.3 | A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `uns | 2023-03-11 23:15:00 | 2020-12-08 22:15:00 |
| CVE-2020-25676 | 4.3 | In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being use | 2023-03-11 23:15:00 | 2020-12-08 22:15:00 |
| CVE-2020-25675 | 4.3 | In the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets was causing undefined behavior in the form of integer overflow and out-of-range values as reported by Undefin | 2023-03-11 23:15:00 | 2020-12-08 22:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39855
Zapisa po stranici:

