Lucene search
K

11 matches found

Github Security Blog
Github Security Blog
added 2026/02/24 3:30 p.m.8 views

ImageMagick: Possible memory leak in ASHLAR encoder

A memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small objects that are allocated but never freed. ==880062== Memcheck, a memory error detector ==880062== Copyright C 2002-2017, and GNU GPL'd, by Julian Seward et al...

5.3CVSS5.5AI score0.00384EPSS
Exploits0References5Affected Software19
OSV
OSV
added 2026/02/24 1:16 a.m.5 views

UBUNTU-CVE-2026-25637

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small objects that are allocated but never...

5.3CVSS5.8AI score0.00384EPSS
Exploits0References6
Snyk
Snyk
added 2026/02/24 12:48 a.m.4 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

6.9CVSS5.7AI score0.00384EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 12:48 a.m.6 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.9CVSS5.7AI score0.00384EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 12:48 a.m.6 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.9CVSS5.7AI score0.00384EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 12:48 a.m.6 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.7AI score0.00384EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 12:48 a.m.6 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.9CVSS5.7AI score0.00384EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 12:48 a.m.4 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.9CVSS5.7AI score0.00384EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 12:48 a.m.5 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.7AI score0.00384EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 12:48 a.m.7 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.7AI score0.00384EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 12:48 a.m.4 views

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the ASHLAR image writer component when processing specially crafted image files. An attacker can cause resource exhaustion and disrupt service availability by submitting maliciously...

6.9CVSS5.7AI score0.00384EPSS
Exploits0References2
Rows per page
Query Builder