Lucene search
K

3164 matches found

SUSE CVE
SUSE CVE
added 2026/02/25 12:24 a.m.2 views

SUSE CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

6.2CVSS6.6AI score0.0002EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2026/02/25 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-26283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in...

7.5CVSS6.9AI score0.0002EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/02/24 3:39 p.m.4 views

ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer

The UIL and XPM image encoder do not validate the pixel index value returned by GetPixelIndex before using it as an array subscript. In HDRI builds, Quantum is a floating-point type, so pixel index values can be negative. An attacker can craft an image with negative pixel index values to trigger ...

9.1CVSS5.8AI score0.00022EPSS
Exploits0References5Affected Software17
OSV
OSV
added 2026/02/24 3:34 p.m.2 views

GHSA-RW6C-XP26-225V ImageMagick: Code Injection via PostScript header in ps coders

The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer like Ghostscript, the...

5.7CVSS5.9AI score0.0001EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2026/02/24 3:34 p.m.5 views

ImageMagick: Code Injection via PostScript header in ps coders

The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer like Ghostscript, the...

5.7CVSS5.7AI score0.0001EPSS
Exploits0References5Affected Software18
OSV
OSV
added 2026/02/24 3:30 p.m.6 views

GHSA-GXCX-QJQP-8VJW ImageMagick has memory leak in msl encoder

Memory leak exists in coders/msl.c. In the WriteMSLImage function of the msl.c file, resources are allocated. But the function returns early without releasing these allocated resources. ==78983== Memcheck, a memory error detector ==78983== Copyright C 2002-2022, and GNU GPL'd, by Julian Seward et...

5.3CVSS5.5AI score0.0002EPSS
Exploits0References5
OSV
OSV
added 2026/02/24 3:30 p.m.4 views

GHSA-GM37-QX7W-P258 ImageMagick: Possible memory leak in ASHLAR encoder

A memory leak in the ASHLAR image writer allows an attacker to exhaust process memory by providing a crafted image that results in small objects that are allocated but never freed. ==880062== Memcheck, a memory error detector ==880062== Copyright C 2002-2017, and GNU GPL'd, by Julian Seward et al...

5.3CVSS5.6AI score0.00019EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/02/24 5:31 a.m.3 views

CVE-2026-25898

A flaw was found in ImageMagick. A remote attacker can exploit this vulnerability by crafting a malicious image file. The UIL and XPM image encoders do not properly validate pixel index values, which can become negative in High Dynamic Range Imaging HDRI builds. This improper validation leads to ...

9.1CVSS5.3AI score0.00022EPSS
Exploits0References4
NVD
NVD
added 2026/02/24 3:16 a.m.4 views

CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

7.5CVSS0.0002EPSS
Exploits0References1
OSV
OSV
added 2026/02/24 3:16 a.m.3 views

DEBIAN-CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

7.5CVSS6.9AI score0.0002EPSS
Exploits0References1
OSV
OSV
added 2026/02/24 3:16 a.m.1 views

UBUNTU-CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

7.5CVSS5.8AI score0.0002EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/02/24 1:55 a.m.2 views

CVE-2026-26283 ImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent`

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

6.2CVSS5.5AI score0.0002EPSS
Exploits0References1
OSV
OSV
added 2026/02/24 1:55 a.m.2 views

CVE-2026-26283 ImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent`

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

6.2CVSS5.6AI score0.0002EPSS
Exploits0References3
CVE
CVE
added 2026/02/24 1:55 a.m.9 views

CVE-2026-26283

Summary: ImageMagick’s jpeg encoder contains a flaw in the JPEG extent binary search loop that can cause an infinite loop and 100% CPU DoS when a crafted image is processed. This affects versions prior to the patched releases and is triggered by a crafted image causing a persistent failure during...

7.5CVSS5.5AI score0.0002EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/02/24 1:55 a.m.17 views

CVE-2026-26283 ImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent`

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

6.2CVSS0.0002EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2026/02/24 1:55 a.m.4 views

CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

7.5CVSS6.9AI score0.0002EPSS
Exploits0
EUVD
EUVD
added 2026/02/24 1:55 a.m.4 views

EUVD-2026-7414

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

7.5CVSS5.4AI score0.0002EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2026/02/24 1:55 a.m.4 views

CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

7.5CVSS5.6AI score0.0002EPSS
Exploits0
Snyk
Snyk
added 2026/02/24 1:18 a.m.3 views

Out-of-bounds Read

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.1CVSS6AI score0.00022EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 1:18 a.m.3 views

Out-of-bounds Read

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

9.1CVSS6AI score0.00022EPSS
Exploits0References2
Rows per page
Query Builder