Lucene search
+L

436 matches found

Github Security Blog
Github Security Blog
added 2026/07/24 2:06 p.m.15 views

ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments

Due to incorrect handling of arguments a heap buffer over-write can occur in the JP2 encoder...

5.5CVSS6AI score0.00148EPSS
SaveExploits0References4Affected Software17
SUSE Linux
SUSE Linux
added 2026/07/13 9:26 a.m.15 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read bsc1270073. CVE-2026-53467: allocated memory left unchanged in the MNG decoder can lead to a heap information disclosure...

8.3CVSS6.3AI score0.01849EPSS
SaveExploits5References168
OSV
OSV
added 2026/07/10 8:02 a.m.7 views

SUSE-SU-2026:2838-1 Security update for libexif

This update for libexif fixes the following issues - CVE-2026-40385: Fixed information disclosure and crashes via integer overflow in Nikon MakerNote handling bsc1262000 - CVE-2026-40386: Fixed denial of service and information disclosure via integer underflow in MakerNote decoding bsc1262001 -...

7.8CVSS6.7AI score0.00193EPSS
SaveExploits1References7
OSV
OSV
added 2026/07/10 8:01 a.m.11 views

SUSE-SU-2026:2837-1 Security update for libexif

This update for libexif fixes the following issues - CVE-2026-40385: Fixed information disclosure and crashes via integer overflow in Nikon MakerNote handling bsc1262000 - CVE-2026-40386: Fixed denial of service and information disclosure via integer underflow in MakerNote decoding bsc1262001 -...

7.8CVSS6.7AI score0.00193EPSS
SaveExploits1References7
SUSE CVE
SUSE CVE
added 2026/07/03 3:02 a.m.16 views

SUSE CVE-2026-55597

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder. This issue has been fixed in version7.1.2-26...

5.5CVSS6AI score0.00148EPSS
SaveExploits0References7
NVD
NVD
added 2026/07/01 7:16 p.m.21 views

CVE-2026-55597

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder. This issue has been fixed in version7.1.2-26...

5.5CVSS0.00148EPSS
SaveExploits0References1
OSV
OSV
added 2026/07/01 7:16 p.m.19 views

UBUNTU-CVE-2026-55597

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder. This issue has been fixed in version7.1.2-26...

5.5CVSS5.9AI score0.00148EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/01 7:03 p.m.137 views

CVE-2026-55597

CVE-2026-55597 affects ImageMagick prior to 7.1.2-26, where incorrect handling of arguments can cause a heap buffer overwrite in the JP2 encoder. The issue is fixed in 7.1.2-26. This can lead to memory corruption in the JP2 encoding path; upgrading to the fixed release is the advised remediation.

5.5CVSS5.9AI score0.00148EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
added 2026/07/01 7:03 p.m.26 views

CVE-2026-55597

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder. This issue has been fixed in version7.1.2-26...

5.5CVSS5.9AI score0.00148EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/07/01 7:03 p.m.51 views

CVE-2026-55597

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-26, an incorrect handling of arguments can cause a heap buffer over-write in the JP2 encoder. This issue has been fixed in version7.1.2-26...

5.5CVSS5.9AI score0.00148EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/01 12:00 a.m.28 views

PT-2026-54856

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-26 Description Incorrect handling of arguments in the JP2 encoder can lead to a heap buffer over-write. A heap buffer over-write occurs when a program writes more data to a heap-allocated memory buffer than ...

9.2CVSS6.2AI score0.01849EPSS
SaveExploits5References127
RedHat Linux
RedHat Linux
added 2026/06/29 10:03 a.m.19 views

ImageMagick: ImageMagick: Heap buffer over-write via `magick -distribute-cache` service connection

A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. A remote attacker, by connecting to a magick -distribute-cache service, can trigger a heap buffer over-write in the server process. This vulnerability can lead to a denial of service...

4.1CVSS5.9AI score0.00092EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.12 views

Astra Linux – Vulnerability in libexif

LibExif through version 0.6.25 has a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function receives a 0 size as input, the passed-in buffer will be overwritten due to an integer underflow...

7.8CVSS5.9AI score0.00193EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/06/17 12:00 a.m.16 views

ImageMagick 7.x < 7.1.2-24 Heap Buffer Over-write (CVE-2026-48724)

The remote host has a version of ImageMagick 7.x installed that is prior to 7.1.2-24. It is, therefore, affected by a heap buffer over-write vulnerability: - When using an image with mask the Floyd-Steinberg dithering method will cause a negative heap buffer over-write. CVE-2026-48724 Note that...

5.5CVSS5.5AI score0.00104EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/06/11 4:47 p.m.12 views

CVE-2026-53465

A flaw was found in ImageMagick. An attacker can exploit this vulnerability by providing a specially crafted multi-frame image. This can lead to a heap buffer overwrite when the image is encoded with the SF3 encoder, resulting in a denial of service DoS for the affected system...

6.2CVSS5.6AI score0.00113EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/06/11 4:47 p.m.19 views

CVE-2026-48994

A flaw was found in ImageMagick. A missing check of a return value in the MAT decoder on 32-bit systems could lead to a heap buffer over-write. This vulnerability may allow an attacker to cause a denial of service...

5.9CVSS5.6AI score0.00227EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/06/11 11:14 a.m.15 views

SUSE CVE-2026-48724

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-24, when using an image with mask the Floyd-Steinberg dithering method it will cause a negative heap buffer over-write. This issue has been patched in version 7.1.2-24...

5.5CVSS5.4AI score0.00104EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/06/11 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-48724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-24, when using an image with mask the...

5.5CVSS5.8AI score0.00104EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/10 11:16 p.m.20 views

CVE-2026-53465

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, a crafted multi-frame can result in a heap buffer over-write when encoding it with the SF3 encoder. This issue has been patched in version 7.1.2-25...

6.2CVSS0.00113EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/10 11:16 p.m.18 views

CVE-2026-48724

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-24, when using an image with mask the Floyd-Steinberg dithering method it will cause a negative heap buffer over-write. This issue has been patched in version 7.1.2-24...

5.5CVSS0.00104EPSS
SaveExploits0References1
Rows per page
Query Builder