CVE-2026-109280

A flaw was found in ImageMagick. A local attacker can cause a Denial of Service DoS or memory corruption by providing crafted -fx expressions under low-memory conditions. When a memory allocation fails during expression processing, the application accesses previously freed memory, leading to an...

CVE-2026-109281

A flaw was found in ImageMagick. An attacker can trigger a heap buffer over-read by providing a specially crafted -fx expression for processing. This vulnerability allows the application to read memory beyond allocated boundaries, potentially leading to unauthorized information disclosure or a...

CVE-2026-109258

A flaw was found in ImageMagick. An invalid memory free vulnerability occurs during the handling of fx operations when initialization of a runtime entry fails. An attacker can exploit this vulnerability by providing input that triggers the initialization failure, leading to memory corruption and ...

CVE-2026-109281

ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap...

CVE-2026-109280

ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who can supply crafted -fx expressions under memory pressure can trigger freed memory access, causing crashes or memory...

CVE-2026-109258

ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application...

EUVD-2026-97582

ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who can supply crafted -fx expressions under memory pressure can trigger freed memory access, causing crashes or memory...

EUVD-2026-97583

ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap...

CVE-2026-109281 ImageMagick 7.1.0-21 before 7.1.2-32 Heap Buffer Over-Read via -fx Option

ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap...

CVE-2026-109281

Versions ImageMagick 7.1.0-21 before 7.1.2-32 are vulnerable to a heap buffer over-read when processing the -fx option . A specific -fx operation may read beyond the bounds of an allocated heap buffer in certain situations. An attacker capable of providing a crafted -fx expression can trigger thi...

CVE-2026-109280

ImageMagick versions 7.1.0-20 before 7.1.2-32 are vulnerable to a use after free vulnerability within the -fx option . The issue arises when a memory allocation fails during a specific operation, allowing an attacker who can supply crafted -fx expressions under memory pressure to trigger access t...

CVE-2026-109280 ImageMagick 7.1.0-20 before 7.1.2-32 Use After Free via -fx Option

ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who can supply crafted -fx expressions under memory pressure can trigger freed memory access, causing crashes or memory...

EUVD-2026-97702

ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application...

CVE-2026-109258 ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation

ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application...

CVE-2026-109258

The ImageMagick software versions 7.1.0-20 before 7.1.2-32 are susceptible to an invalid memory free vulnerability within the fx operation . This issue is triggered when the initialization of an FX runtime entry fails, allowing an attacker to cause an invalid free . The primary consequences inclu...

CVE-2021-27187

CVE-2021-27187 Suggested description The FX Aggregator terminal client by "Sovremennye Delovye Tekhnologii" stores authentication credentials in cleartext in login.sav when the Save Password box is checked. VulnerabilityType Other CWE-522 Insufficiently Protected Credentials Vendor of Product OOO...

CVE-2021-27188

CVE-2021-27188 Suggested description The FX Aggregator terminal client by "Sovremennye Delovye Tekhnologii" allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account. VulnerabilityType Other DoS Vendor of Product OOO...

PT-2026-102761

Name of the Vulnerable Software and Affected Versions NetX Duo TFTP server affected versions not specified Description The TFTP server fails to validate the upper bound of DATA datagram sizes, ignoring the protocol maximum of 4 + NX TFTP FILE TRANSFER MAX. This lack of validation leads to two...

CVE-2026-82762

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82763

Cross-site scripting vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...