447 matches found
CVE-2026-46692 ImageMagick: Heap Buffer Over-Write in distributed pixel cache server
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-write in the server process. This issue has been patched in...
CVE-2026-46559
ImageMagick CVE-2026-46559 is a JP2 encoder heap buffer over-write of a single byte triggered by certain options. Affected versions are 6.9.13-47 and earlier and 7.1.2-22 and earlier; patch applied in 6.9.13-48 and 7.1.2-23. This CVE has a CVSSv3.1 base score of 4.0 (Medium), with LOCAL attack ve...
CVE-2026-46559
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an incorrect check in the JP2 will result in an heap buffer over-write of a single byte when specifying certain options. This issue has been patched in versions...
CVE-2026-46521
CVE-2026-46521 affects ImageMagick: a heap buffer over-write in the MIFF encoder when using LZMA compression due to a missing check. Exploitation is local with low complexity and requires user interaction, potentially impacting availability. A patch is available: fixed in ImageMagick versions 6.9...
EUVD-2026-36171
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check. This issue has been patched in versions 6.9.13-48 and...
CVE-2026-46521 ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check. This issue has been patched in versions 6.9.13-48 and...
EUVD-2026-36164
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading multiple images with different dimensions an out of bounds heap write can occur. This issue has been patched in versions 6.9.13-48 and 7.1.2-23...
EUVD-2026-36160
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-22, an invalid connected-components:keep-top value could result in a heap buffer over-read when performing the connected components operation. This issue has been...
CVE-2026-46523
CVE-2026-46523 is a use-after-free in ImageMagick’s MSL image handling. A crafted MSL image can trigger a heap-use-after-free, affecting versions prior to 7.1.2.23 and 6.9.13-48. The issue is fixed in 7.1.2.23 and 6.9.13-48. If you rely on ImageMagick, upgrade to one of the fixed releases to reme...
EUVD-2026-36155
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, a crafted MSL image can trigger a heap-use-after-free. Versions 7.1.2.23 and 6.9.13-48 fix the issue...
PT-2026-48565
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-48 ImageMagick versions prior to 7.1.2-24 Description A missing check of a return value in the MAT decoder on 32-bit systems can lead to a heap buffer over-write. A heap buffer over-write occurs when a...
ImageMagick 安全漏洞
ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It allows for reading, converting, and writing images in various formats. Vulnerabilities existed in versions of ImageMagick before 6.9.13-48 and 7.1.2-23, particularly due to a security flaw where...
ImageMagick 竞争条件问题漏洞
ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It allows for reading, converting, and writing images in various formats. Versions of ImageMagick prior to 6.9.13-48 and 7.1.2-23 contained a race condition vulnerability. This vulnerability stemme...
PT-2026-48567
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-48 ImageMagick versions prior to 7.1.2-24 Description Incorrect parsing of the filename allows a policy bypass, enabling the reading of files disallowed by a security policy through the use of a symlink a...
CVE-2026-24237
creationtimestamp| type| source ---|---|--- 2026-06-02 18:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnd6flsf6b2u 2026-07-26 10:07:06+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mrk54d2ppw23...
CVE-2026-44962
creationtimestamp| type| source ---|---|--- 2026-05-29 17:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyz6o75yk2w 2026-06-01 07:56:27+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/plesk-security-advisory-av26-534 2026-06-01 10:42:49+00:00| seen|...
CVE-2026-7526
creationtimestamp| type| source ---|---|--- 2026-05-28 11:48:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmvxaoy22o2i...
CVE-2026-42737
creationtimestamp| type| source ---|---|--- 2026-05-27 12:02:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmthly6rxy2i...
CVE-2026-48132
creationtimestamp| type| source ---|---|--- 2026-05-26 15:24:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmrcgal5mv2i 2026-05-27 14:35:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mmtq4yad4r2m...