CVE-2019-19951

In GraphicsMagick 1.4 snapshot-20190423 Q8, there is a heap-based buffer overflow in the function ImportRLEPixels of coders/miff.c.

Updated graphicsmagick packages fix security vulnerabilities:

Fixed a use-after-free in ThrowException and ThrowLoggedException of magick/error.c (CVE-2019-19950).

Fixed a heap-based buffer overflow in ImportRLEPixels() (CVE-2019-19951).

Fixed a heap-based buffer overflow in EncodeImage() (CVE-2019-19953).

This update for GraphicsMagick fixes the following issues:

• CVE-2019-19950: Fixed a use-after-free in ThrowException and ThrowLoggedException of magick/error.c. (boo#1159852)
• CVE-2019-19951: Fixed a heap-based buffer overflow in ImportRLEPixels() (boo#1160321).
• CVE-2019-19953: Fixed a heap-based buffer overflow in EncodeImage() (boo#1160364).

This update for GraphicsMagick fixes the following issues:

• CVE-2019-19950: Fixed a use-after-free in ThrowException and ThrowLoggedException of magick/error.c. (boo#1159852)
• CVE-2019-19951: Fixed a heap-based buffer overflow in ImportRLEPixels() (boo#1160321).
• CVE-2019-19953: Fixed a heap-based buffer overflow in EncodeImage() (boo#1160364).

This update was imported from the openSUSE:Leap:15.1:Update update project.

It was discovered that GraphicsMagick allowed reading arbitrary files via specially crafted images. An attacker could use this issue to expose sensitive information. This issue only affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2019-12921)

It was discovered that GraphicsMagick did not correctly handle memory allocations for error messages. An attacker could use this issue to corrupt memory or possibly execute arbitrary code. This issue only affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2019-19950)

It was discovered that GraphicsMagick did not correctly handle type limits. An attacker could use these issues to cause heap-based buffer overflows, leading to a denial of service (application crash) or possibly execute arbitrary code. These issues only affect Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2019-19951, CVE-2019-19953)

It was discovered that GraphicsMagick did not correctly handle the signed integer limit in 32-bit applications. An attacker could use this issue to cause a heap-based buffer overflow, leading to a denial of service (application crash) or possibly execute arbitrary code. This issue only affects Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 ESM. (CVE-2020-10938)

It was discovered that GraphicsMagick did not properly magnify certain images. An attacker could use this issue to cause a heap-based buffer overflow, leading to a denial of service (application crash) or possibly execute arbitrary code. (CVE-2020-12672)