Lucene search
+L

2355 matches found

Github Security Blog
Github Security Blog
added 2 days ago9 views

ImageMagick: Information Disclosure when printing profiles with debug enabled

When a profile is displayed with the identify command and the value is not printable a single byte at the end of the profile can be printed...

5.9AI score
SaveExploits0References3Affected Software17
OSV
OSV
added 2 days ago6 views

OESA-2026-3127 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

5.4AI score
SaveExploits0References3
Ubuntu
Ubuntu
added 3 days ago5 views

USN-8600-1: libXpm vulnerability

Naoki Wakamatsu discovered that libXpm did not properly validate file boundaries when processing XPM image files. An attacker could possibly use this issue to cause libXpm to crash, resulting in a denial of service...

5.5CVSS4.8AI score0.00129EPSS
SaveExploits0
OSV
OSV
added 5 days ago3 views

DEBIAN-CVE-2026-47667

CImg Library is a C++ library for image processing. Prior to version 4.0.0 in loadanalyze, the headersize field is read as an unsigned int from the first 4 bytes of an Analyze/NIfTI file and passed directly to new unsigned charheadersize without being bounded against the actual file size. A value...

7.5CVSS5.5AI score0.00432EPSS
SaveExploits0References1
NVD
NVD
added 5 days ago10 views

CVE-2026-47667

CImg Library is a C++ library for image processing. Prior to version 4.0.0 in loadanalyze, the headersize field is read as an unsigned int from the first 4 bytes of an Analyze/NIfTI file and passed directly to new unsigned charheadersize without being bounded against the actual file size. A value...

7.5CVSS0.00432EPSS
SaveExploits0References3
OSV
OSV
added 5 days ago3 views

UBUNTU-CVE-2026-33327

libvips is a fast image processing library with low memory needs. The...

7CVSS5.2AI score0.00132EPSS
SaveExploits0References4
OSV
OSV
added 5 days ago9 views

UBUNTU-CVE-2026-33328

libvips is a fast image processing library with low memory needs. On 3...

6.8CVSS5.2AI score0.0012EPSS
SaveExploits0References4
OSV
OSV
added 5 days ago5 views

UBUNTU-CVE-2026-35590

libvips is a fast image processing library with low memory needs. The...

6.8CVSS5.2AI score0.0012EPSS
SaveExploits0References4
OSV
OSV
added 5 days ago3 views

UBUNTU-CVE-2026-35591

libvips is a fast image processing library with low memory needs. The...

7CVSS5.2AI score0.00132EPSS
SaveExploits0References4
NVD
NVD
added 6 days ago7 views

CVE-2026-33327

libvips is a fast image processing library with low memory needs. The vipsload operation in versions before and including 8.18.0 could incorrectly determine image dimensions leading to an integer overflow and a subsequent heap-based buffer overflow. This has been patched in version 8.18.1...

7CVSS0.00132EPSS
SaveExploits0References3
OSV
OSV
added 6 days ago4 views

CVE-2026-33328 Possible integer overflow on 32-bit systems when reading GIF images

libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the gifload operation could incorrectly determine dimensions leading to an integer overflow. This has been patched in version 8.18.1...

6.8CVSS5.4AI score0.0012EPSS
SaveExploits0References5
Cvelist
Cvelist
added 6 days ago48 views

CVE-2026-33327 Possible integer overflow leading to potential heap-based buffer overflow

libvips is a fast image processing library with low memory needs. The vipsload operation in versions before and including 8.18.0 could incorrectly determine image dimensions leading to an integer overflow and a subsequent heap-based buffer overflow. This has been patched in version 8.18.1...

7CVSS0.00132EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 6 days ago6 views

CVE-2026-33327

libvips is a fast image processing library with low memory needs. The vipsload operation in versions before and including 8.18.0 could incorrectly determine image dimensions leading to an integer overflow and a subsequent heap-based buffer overflow. This has been patched in version 8.18.1...

7CVSS5.7AI score0.00132EPSS
SaveExploits0
Snyk
Snyk
added 2026/07/15 2:36 p.m.6 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

1.8CVSS5.9AI score0.00092EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.7 views

Symlink Attack

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

4.8CVSS5.9AI score0.00124EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.8 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

7.5CVSS5.9AI score0.00187EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.6 views

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the MIFF encoder when a memory allocation fails during MIFF image processing. An attacker can cause a denial of service by triggering repeated memory allocation failures. Remediation...

5.9CVSS5.3AI score0.00102EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.5 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.9CVSS5.9AI score0.00102EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.6 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.9CVSS5.9AI score0.00102EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/15 2:36 p.m.6 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

5.9CVSS5.9AI score0.00102EPSS
SaveExploits0References2
Rows per page
Query Builder