Bastien-Roucaries

The issue is related to memory leak errors in the ruby-magick interface between Ruby and the ImageMagick library. This can lead to a denial of service (DOS) by memory exhaustion, potentially allowing a remote attacker to cause a service disruption.

A flaw was found in Ansible in the amazon.aws collection when using the `tower callback` parameter from the `amazon.aws.ec2 instance` module. This issue allows an attacker to take advantage of the insecure handling of the parameter, leading to the password leaking in the logs.

The issue is related to memory leaks in the ReadSCREENSHOTImage function, which can cause denial of service.

The issue allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted file. This is due to a problem in the ReadJPEGImage function in coders/jpeg.c.

The issue is related to the handling of images in ImageMagick, where the coders/mpc.c file does not enable seekable streams, which prevents the validation of blob sizes. This can be exploited by remote attackers to cause a denial of service, resulting in an application crash, or possibly have other unspecified impacts via an image received from stdin.

The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, via JPEG data that is too short.

A heap overflow issue exists in the WaveletDenoiseImage function, located in MagickCore/fx.c, allowing remote attackers to cause a denial of service by crashing the system via a crafted image.

The issue is related to insufficient input validation in the DOMPurify JavaScript library, which can lead to a cross-site scripting (XSS) attack. This vulnerability allows a remote attacker to perform a cross-site scripting attack. DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML, and SVG, and it was vulnerable to nesting-based mXSS.