Lucene search
+L

3787 matches found

NVD
NVD
added 2026/02/24 1:16 a.m.14 views

CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS0.00161EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/24 1:1 a.m.47 views

CVE-2026-25797

ImageMagick (affected: 7.1.2-15 and 6.9.13-40) contains two input-sanitization issues in the PostScript header written by the ps coders and in HTML escaping when writing to documents. The ps coders fail to sanitize input before inserting into the PostScript header, allowing an attacker to craft a...

5.7CVSS5.7AI score0.00161EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2026/02/24 1:1 a.m.8 views

CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS8.1AI score0.00161EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/02/24 12:49 a.m.37 views

CVE-2026-25638 ImageMagick has memory leak in msl encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, memory leak exists in coders/msl.c. In the WriteMSLImage function of the msl.c file, resources are allocated. But the function returns early without releasing...

5.3CVSS0.00325EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/24 12:49 a.m.6 views

CVE-2026-25638 ImageMagick has memory leak in msl encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, memory leak exists in coders/msl.c. In the WriteMSLImage function of the msl.c file, resources are allocated. But the function returns early without releasing...

5.3CVSS5.5AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/24 12:49 a.m.20 views

CVE-2026-25638 ImageMagick has memory leak in msl encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, memory leak exists in coders/msl.c. In the WriteMSLImage function of the msl.c file, resources are allocated. But the function returns early without releasing...

5.3CVSS7.2AI score0.00325EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/24 12:48 a.m.28 views

CVE-2026-25637 ImageMagick: Possible memory leak in ASHLAR encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small objects that are allocated but never...

5.3CVSS0.00384EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/02/24 12:48 a.m.6 views

CVE-2026-25637 ImageMagick: Possible memory leak in ASHLAR encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small objects that are allocated but never...

5.3CVSS7.3AI score0.00384EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/24 12:48 a.m.196 views

CVE-2026-25637

ImageMagick (vulnerability in ASHLAR encoder/writer) is affected prior to 7.1.2-15. A memory leak causes allocated small objects to never be freed when processing a crafted image, potentially exhausting process memory. The patch is included in version 7.1.2-15. Text in connected documents confirm...

5.3CVSS5.4AI score0.00384EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/02/24 12:48 a.m.10 views

CVE-2026-25637 ImageMagick: Possible memory leak in ASHLAR encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-15, a memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small objects that are allocated but never...

5.3CVSS5.6AI score
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/02/24 12:0 a.m.4 views

CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS6AI score0.00161EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/02/24 12:0 a.m.8 views

CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

7.5CVSS6.5AI score0.00327EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/24 12:0 a.m.15 views

ImageMagick 安全漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 7.1.2-15 and 6.9.13-40 contained security vulnerabilities. These vulnerabilities stemmed from the continu...

7.5CVSS6.9AI score0.00327EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2026/02/09 6:16 p.m.8 views

CVE-2026-24677

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecamencodercompressh264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in swsscale. This vulnerability is fixed in 3.22.0...

9.1CVSS5.8AI score0.00489EPSS
SaveExploits0
CVE
CVE
added 2026/02/09 6:16 p.m.44 views

CVE-2026-24677

FreeRDP prior to 3.22.0 contains a vulnerability in ecam_encoder_compress_h264 that trusts server-controlled dimensions and does not validate the source buffer size, causing an out-of-bounds read in sws_scale. This is fixed in version 3.22.0. Affected releases include FreeRDP before 3.22.0; multi...

9.1CVSS5.8AI score0.00489EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/09 6:16 p.m.5 views

CVE-2026-24677

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecamencodercompressh264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in swsscale. This vulnerability is fixed in 3.22.0...

8.7CVSS5.8AI score0.00489EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/02/09 6:16 p.m.7 views

CVE-2026-24677 FreeRDP has a heap-buffer-overflow in ecam_encoder_compress_h264

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecamencodercompressh264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in swsscale. This vulnerability is fixed in 3.22.0...

8.7CVSS5.8AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/02/09 6:16 p.m.45 views

CVE-2026-24677 FreeRDP has a heap-buffer-overflow in ecam_encoder_compress_h264

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, ecamencodercompressh264 trusts server-controlled dimensions and does not validate the source buffer size, leading to an out-of-bounds read in swsscale. This vulnerability is fixed in 3.22.0...

8.7CVSS0.00489EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/09 12:0 a.m.14 views

FreeRDP 资源管理错误漏洞

FreeRDP is an open-source implementation of the Remote Desktop Protocol RDP by the FreeRDP team. Versions of FreeRDP prior to 3.22.0 contained a resource management vulnerability. This vulnerability stemmed from the ecamencodercompressh264 component’s reliance on server-controlled settings and th...

9.1CVSS7.4AI score0.00489EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/06 12:0 a.m.15 views

PT-2026-21624

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the UIL and XPM image encoder does n...

9.1CVSS6.1AI score0.0045EPSS
SaveExploits0References177
Rows per page
Query Builder