Zerojackyi

**Name of the Vulnerable Software and Affected Versions** Little CMS (lcms2) versions 2.16 through 2.18 **Description** An integer overflow exists in the `ParseCube()` function within the `cmscgats.c` file. An integer overflow occurs when a program attempts to store a numeric value that is too large for the allocated storage space, potentially leading to unexpected behavior. **Recommendations** Update to version 2.19.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 7.1.2-15 **Description** A use-after-free issue exists in the PDB decoder. This occurs when the system uses a stale pointer following a memory allocation failure. An attacker can exploit this by processing specially crafted PDB files, which may lead to application crashes or the writing of a single zero byte to freed memory. **Recommendations** Update to version 7.1.2-15 or later.

**Name of the Vulnerable Software and Affected Versions** Exiv2 versions prior to 0.28.8 **Description** Exiv2 is a C++ library and a command-line utility used to read, write, delete, and modify image metadata formats like Exif, IPTC, XMP, and ICC. A flaw exists in the preview component that can lead to an out-of-bounds read when Exiv2 is executed with an additional command-line argument, such as `-pp`. This out-of-bounds read occurs at a 4GB offset, typically resulting in a crash of the Exiv2 application. The `LoaderNative::getData()` function is implicated in this issue. **Recommendations** Versions prior to 0.28.8 should be updated to version 0.28.8 or later.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 **Description** ImageMagick is software used for editing and manipulating digital images. A heap-buffer-overflow issue exists in the PCL encode functionality due to an undersized output buffer allocation. **Recommendations** Update to ImageMagick version 7.1.2-16 or later. Update to ImageMagick version 6.9.13-41 or later.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 **Description** ImageMagick is software used for editing and manipulating digital images. A stack buffer overflow exists in the MNG encoder due to missing bounds checks, potentially allowing an attacker to corrupt the stack with controlled data. **Recommendations** Update ImageMagick to version 7.1.2-16 or later. Update ImageMagick to version 6.9.13-41 or later.

**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 **Description** ImageMagick is software used for editing and manipulating digital images. A flaw exists in the JBIG decoder due to a missing check, leading to an uninitialized pointer dereference. **Recommendations** Update ImageMagick to version 7.1.2-16 or later. Update ImageMagick to version 6.9.13-41 or later.