Lucene search
+L

4774 matches found

Tenable Nessus
Tenable Nessus
•added 2026/07/14 12:00 a.m.•19 views

openSUSE 16: ImageMagick / ImageMagick-config-7-SUSE / etc (openSUSE-SU-2026:21291-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21291-1 advisory. This update for ImageMagick fixes the following issues - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read...

9.2CVSS6.7AI score0.01643EPSS
SaveExploits1References31
SUSE Linux
SUSE Linux
•added 2026/07/13 9:26 a.m.•18 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read bsc1270073. CVE-2026-53467: allocated memory left unchanged in the MNG decoder can lead to a heap information disclosure...

8.3CVSS6.2AI score0.01934EPSS
SaveExploits5References168
OSV
OSV
•added 2026/07/13 9:26 a.m.•13 views

SUSE-SU-2026:2877-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read bsc1270073. - CVE-2026-53467: allocated memory left unchanged in the MNG decoder can lead to a heap information disclosure...

9.2CVSS6.3AI score0.01934EPSS
SaveExploits5References85
BDU FSTEC
BDU FSTEC
•added 2026/07/13 12:00 a.m.•17 views

The vulnerability of the `io.netty.handler.codec.redis.RedisEncoder` component in the framework for developing network applications, servers, and clients using the Netty protocol allows a hacker to inject arbitrary commands.

The vulnerability of the io.netty.handler.codec.redis.RedisEncoder component in the framework for developing network applications, servers, and clients using the Netty protocol is related to improper code generation. Exploiting this vulnerability allows a remote attacker to inject arbitrary...

8.1CVSS7.2AI score0.0018EPSS
SaveExploits1References3Affected Software2
Tenable Nessus
Tenable Nessus
•added 2026/07/12 12:00 a.m.•23 views

Linux Distros Unpatched Vulnerability : CVE-2026-61870

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by...

7.5CVSS5.5AI score0.00191EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/07/11 7:40 p.m.•24 views

CVE-2026-61870

A flaw was found in ImageMagick. This vulnerability involves a memory leak within the VIFF encoder, a component responsible for handling image files. An attacker could exploit this by providing specially crafted VIFF images, which would trigger memory allocation failures. This action can exhaust...

7.5CVSS5.5AI score0.00191EPSS
SaveExploits0References5
OSV
OSV
•added 2026/07/11 2:16 p.m.•15 views

DEBIAN-CVE-2026-61870

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service...

7.5CVSS5.5AI score0.00191EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/11 2:16 p.m.•20 views

CVE-2026-61858

ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can write files to disallowed paths by bypassing configured policy restrictions through the APNG encoding process...

5.3CVSS0.00246EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/11 2:16 p.m.•31 views

CVE-2026-61870

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service...

7.5CVSS0.00191EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/07/11 2:16 p.m.•24 views

CVE-2026-61870

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service...

7.5CVSS5.5AI score0.00191EPSS
SaveExploits0References5
OSV
OSV
•added 2026/07/11 2:16 p.m.•15 views

UBUNTU-CVE-2026-61870

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service...

7.5CVSS5.5AI score0.00191EPSS
SaveExploits0References6
Snyk
Snyk
•added 2026/07/11 1:40 p.m.•25 views

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime through the WriteVIFFImage encoder in coders/viff.c. An attacker can consume memory by causing the VIFF encoder to hit an allocation failure while processing an image with a color map...

7.5CVSS5.8AI score0.00191EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 1:40 p.m.•22 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.6AI score0.00191EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 1:40 p.m.•20 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

7.5CVSS5.6AI score0.00191EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 1:40 p.m.•14 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

7.5CVSS5.6AI score0.00191EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 1:40 p.m.•22 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.6AI score0.00191EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 1:40 p.m.•16 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.6AI score0.00191EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 1:40 p.m.•16 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.6AI score0.00191EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 1:40 p.m.•15 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.6AI score0.00191EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/07/11 1:40 p.m.•15 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.6AI score0.00191EPSS
SaveExploits0References2
Rows per page
Query Builder