ImageMagick resource management error vulnerability

Versions of ImageMagick prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability arises because the UHDR decoder performs range checks only after decoding, allowing attackers to bypass image size restrictions and deliver specially crafted ultra-large UHDR images,...

ImageMagick resource management error vulnerability

Versions 7.x prior to ImageMagick 6.9.13-58 and prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability stems from a lack of cleanup when using the -set profile option, potentially leading to memory leaks, resource exhaustion, and even a denial of service...

Brain ADM-ZIP for NodeJS processing logic error vulnerability

The Brain ADM-ZIP for NodeJS versions 0.6.1 and earlier contain a logic error vulnerability stemming from improper validation of repeated entries. This flaw allows attackers to bypass readEntries checks by using valid equivalent entry names. They can then craft a ZIP archive such that getEntry or...

smg-project Shepherd Model Gateway resource management error vulnerability

Versions 1.7.0, 1.8.0, 1.9.0, 1.10.0, and 1.10.1 of the smg-project Shepherd Model Gateway contain a resource management error vulnerability. This vulnerability arises from improper memory allocation caused by operations on the jpegturbo::decodejpegrgb function within the file...

Edgeless Systems contrast input validation error vulnerability

Edgeless Systems version 1.21.0 prior to 1.25.0 contains an input validation error vulnerability. This flaw stems from an indeterministic flaw in registry selection within imagepuller; it prioritizes matching wildcard configuration values over specific domain names. As a result, registry...

vLLM input validation error vulnerability

Versions vLLM 0.22.0 through 0.24.0 contain an input validation error vulnerability. This flaw stems from improper input validation in the Rust gRPC converter. Remote attackers can exploit CandidateTokens.topn to bypass the maxlogprobs limit by sending Generate or GenerateStream requests containi...

Parse Platform Parse Server input validation error vulnerability

Versions prior to Parse Platform Parse Server 8.6.100 and versions from 9.0.0 through 9.10.4-alpha.3 contain an input validation error vulnerability. This vulnerability arises from the failure to reject writes to reserved internal field names within client objects; as a result, clients can store ...

Rclone input validation error vulnerability

Versions of Rclone from 1.52.0 through 1.75.2 contain an input validation error vulnerability. This vulnerability stems from the pCloud backend’s failure to verify the localhost OAuth callback status and trusting the hostname parameter. It makes the system susceptible to cross-site request forger...

vLLM resource management error vulnerability

Versions vLLM from 0.18.0 up to but not including 0.31.0 contain a resource management error vulnerability. This vulnerability arises because the API client can bypass the maximum number of video/JPEG frames by using mediaiokwargs to set numframes to -1 and uploading large inline videos. As a...

vLLM input validation error vulnerability

Versions vLLM 0.20.1 through 0.29.0 contain an input validation error vulnerability. This flaw stems from improper validation of stoptokenids. Remote attackers can exploit it by sending OpenAI chat, completion, generate, or batch requests containing invalid IDs, potentially causing the engine to...

openSUSE 16 Security Update : haproxy (openSUSE-SU-2026:22162-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22162-1 advisory. This update for haproxy fixes the following issue: - h1-htx: report an error on a too long chunk-size line bsc1285046. Changes for haproxy: - Otel Updat...

AlmaLinux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792140497)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792140497 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a...

ImageMagick processing logic error vulnerability

Versions 7.x prior to ImageMagick 6.9.13-58 and prior to 7.1.2-32 contain a logic error vulnerability stemming from an incomplete fix for policy bypass issues. This allows security policy bypass, enabling attackers to circumvent configuration restrictions that would otherwise prevent certain...

ggml llama.cpp buffer error vulnerability

Versions 0.4.0, 0.17.1, 55abc39, 55d4206c8, b5693, b7445, b7824, b8492, b8585, b9058, and b9060 of ggml llama.cpp contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds write caused by the mmproj parameter in the listpocketttsstateslots function within the...

vLLM input validation error vulnerability

Versions vLLM 0.20.0 through 0.29.0 contain an input validation error vulnerability. This vulnerability arises from sending inconsistent multimodal metadata to the /split/inference/v1/generate endpoint. By replaying valid multimodal entries that contain repeated or overlapping mmplaceholders with...

vLLM input validation error vulnerability

Versions vLLM 0.22.0 through 0.24.0 contain an input validation error vulnerability. This flaw stems from Rust’s gRPC frontends failing to properly restrict logprobtokenids. Remote attackers can exploit this by sending a Generate or GenerateStream request that enables outputlogprobs and contains...

vLLM input validation error vulnerability

Versions vLLM 0.22.0 through 0.24.0 contain an input validation error vulnerability. This vulnerability stems from improper input validation in the Rust gRPC Generate and GenerateStream services; it allows unvalidated prompt token IDs to be forwarded to EngineCore. As a result, attackers can supp...

ImageMagick resource management error vulnerability

Versions 7.x prior to ImageMagick 6.9.13-58 and prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability arises because the JNG encoder fails to release allocated memory when processing specially crafted images. Attackers can exploit this by providing a specially...

ImageMagick resource management error vulnerability

Versions 7.x prior to ImageMagick 6.9.13-58 and prior to 7.1.2-33 contain a resource management error vulnerability. This vulnerability arises from memory allocation used when processing the -cdl color decision list option without subsequent cleanup. An attacker can supply input to trigger this...

ImageMagick buffer error vulnerability

Versions of ImageMagick prior to 7.1.2-33 contain a buffer error vulnerability. This vulnerability arises from excessive heap buffer reading when printing minimum bounding boxes; it may lead to reading beyond allocated memory, resulting in a crash or exposure of adjacent heap memory...