decoder-plus-plus

Decoder++ Decoder++ is an extensible application designed for penetration testers, software developers, and anyone in between looking to effortlessly decode and encode data across various formats. It includes a wide range of preinstalled scripts and codecs, smart decoding and format identificatio...

CLEANSTART-2026-AS77854 Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression)

Security vulnerability affects the apache-hive package. The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data which affects the allocation size used during decompression...

The vulnerability of the readAlf function in the vvdecapp (VVdeC) decoder allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the readAlf function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

Brosec

Overview tl;dr Brosec is a terminal based reference utility designed to help us infosec bros and broettes with useful yet sometimes complex payloads and commands that are often used during work as infosec practitioners. An example of one of Brosec's most popular use cases is the ability to genera...

EUVD-2026-93576

ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate...

EUVD-2026-93559

ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop...

CVE-2026-107209

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause the RSVG decoder to free image state twice and then use fre...

CVE-2026-106572

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process. This issue is fixed in versions...

CVE-2026-106569

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, missing validation and resource checks in the ASE decoder allow a crafted ASE image to cause a crash or a long-running operation. This issue is fixed in version 7.1.2-32...

CVE-2026-106564

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash. This issue is fixed in version 7.1.2-32...

CVE-2026-106567

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in...

CVE-2026-107210

The ImageMagick software is vulnerable to a policy bypass in its MAT decoder when processing highly compressed data. A crafted MAT image can cause the decoder to create temporary files that exceed configured security-policy limits, leading to excessive disk space consumption . This vulnerability ...

CVE-2026-107209 ImageMagick: Use-After-Free in RSVG decoder that is build without cairo support

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause the RSVG decoder to free image state twice and then use fre...

CVE-2026-107209 ImageMagick: Use-After-Free in RSVG decoder that is build without cairo support

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause the RSVG decoder to free image state twice and then use fre...

CVE-2026-107209

The ImageMagick software is vulnerable to a Use-After-Free condition in the RSVG decoder when the software is built without Cairo support . A crafted RSVG image that reaches a resource limit can cause the decoder to free image state twice and subsequently access freed memory, resulting in a proce...

CVE-2026-106578

The ImageMagick image manipulation software is vulnerable to an invalid memory free in the MVG decoder when processing a crafted image. This flaw can result in a process crash . The vulnerability affects versions prior to 7.1.2-31 and 6.9.13-56 . Remediation is available in versions 7.1.2-31 and ...

CVE-2026-106573

The ImageMagick image manipulation software is vulnerable to a Denial of Service (DoS) condition due to a missing limit check in the MVG decoder . A crafted MVG image can trigger an excessively long-running operation, impacting availability. This issue is resolved in versions 7.1.2-31 and 6.9.13-...

EUVD-2026-94391

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process. This issue is fixed in versions...

CVE-2026-106572 ImageMagick: Stack Overflown CALS decoder due to missing depth check.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process. This issue is fixed in versions...

CVE-2026-106572

The ImageMagick image manipulation library is vulnerable to a stack overflow due to a missing recursion-depth check in the CALS decoder . A crafted CALS image can trigger this issue, leading to call stack exhaustion and subsequent process termination. This vulnerability affects versions prior to ...