14 matches found
CVE-2026-116159
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl color decision list option, where allocated memory is not cleaned up after use. Attackers can supply input that causes the -cdl option to be processed, repeatedly leaking memory and degrading...
CVE-2026-116159
A flaw was found in ImageMagick. The handling of the color decision list -cdl option fails to properly release allocated memory after use. An attacker can exploit this issue by providing input that repeatedly processes the -cdl option, leading to excessive memory consumption and a Denial of Servi...
CVE-2026-116159
ImageMagick versions prior to 6.9.13-58 and 7.x before 7.1.2-33 are vulnerable to a memory leak within the handling of the -cdl (color decision list) option. The root cause is that allocated memory is not properly cleaned up after use. An attacker can provide input that triggers the processing of...
EUVD-2026-109420
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl color decision list option, where allocated memory is not cleaned up after use. Attackers can supply input that causes the -cdl option to be processed, repeatedly leaking memory and degrading...
CVE-2026-116159 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -cdl Option
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl color decision list option, where allocated memory is not cleaned up after use. Attackers can supply input that causes the -cdl option to be processed, repeatedly leaking memory and degrading...
PT-2026-123000
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl color decision list option, where allocated memory is not cleaned up after use. Attackers can supply input that causes the -cdl option to be processed, repeatedly leaking memory and degrading...
PT-2026-106561
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.3-rc1 Description An issue exists in the scsi cdl enable function where length fields returned by MODE SENSE are used to locate the ATA feature mode page within a 64-byte stack buffer. A target can report a tot...
oac.cdlib.org Cross Site Scripting vulnerability OBB-3891662
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cdlestancia.com.br Cross Site Scripting vulnerability OBB-3101815
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
cdldriverjobsalabama.com Cross Site Scripting vulnerability OBB-1251711
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
cdlitapetinga.com.br Cross Site Scripting vulnerability OBB-1204326
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Microsoft Internet Explorer HTTP重定向未初始化内存远程代码执行漏洞
Bugtraq ID: 48211 CVE ID：CVE-2011-1262 Microsoft Internet Explorer是一款微软开发的WEB浏览器。 Internet Explorer处理HTTP 302重定向到CDL协议存在缺陷。当Internet Explorer判断哪个负责处理协议重定向时，未能维护一个正确的用于事务对象的引用计数器，结果可导致释放后使用漏洞，可以以应用程序上下文执行任意代码 Microsoft Internet Explorer 9 Microsoft Internet Explorer 8 Microsoft Internet Explorer 7...
Microsoft Internet Explorer HTTP 302 Redirect Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Internet Explorer Redirect CDL Protocol Memory Corruption (MS11-050; CVE-2011-1262)
A remote code execution vulnerability has been reported in Internet Explorer. The vulnerability is due to a memory corruption error in Internet Explorer when handling CDL protocol. Successful exploitation of this vulnerability will crash the browser, and may allow execution of arbitrary code on t...