EUVD-2026-92621

Ghost: Remote Code Execution via Bookmark Card Images...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS through the processing of a crafted XMP profile. An attacker can cause the image-processing process to terminate unexpectedly by supplying a specially crafted input that triggers a recursion limit to be handled as ...

[SECURITY] Fedora 45 Update: ocaml-camlimages-5.0.5-14.fc45

This is an image processing library, which provides some basic functions of image processing and loading/saving various image file formats. In addition the library can handle huge images that cannot be or can hardly be stored into the memory the library automatically creates swap files and escape...

CVE-2026-105642

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

CVE-2026-105642 Ghost: Remote Code Execution via Bookmark Card Images

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

CVE-2026-105642

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

CVE-2026-105642: Improper Control of Generation of Code

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

PT-2026-106138

Name of the Vulnerable Software and Affected Versions Ghost versions 6.56.0 through 6.66.0 Description A vulnerability exists in the SVG handling of an image processing library bundled with the Ghost content management system. A staff user with Contributor permissions or higher can create a...

CVE-2021-22204

CVE-2021-22204 - ExifTool 任意代码执行 这是针对 CVE-2021-22204 的升级版概念验证（PoC），该漏洞影响 ExifTool 7.44 至 12.23 版本，在处理恶意 DjVu 文件时可导致任意代码执行。 致谢 本文为衍生作品。该漏洞及原始利用代码并非本人所发现。 角色| 人员 ---|--- 漏洞发现者| William Bowling @wcbowling，通过 GitLab 漏洞赏金计划提交 — 2021 年 4 月 原始 PoC 作者| UNICORD NicPWNs & Dev-Yeoj 本仓库修改者| d4ytox 描述 ExifToo...

[SECURITY] Fedora 45 Update: GraphicsMagick-1.3.45-11.fc45

GraphicsMagick is a comprehensive image processing package which is initially based on ImageMagick 5.5.2, but which has undergone significant re-work by the GraphicsMagick Group to significantly improve the quality and performance of the software...

[SECURITY] Fedora 45 Update: perl-Imager-1.036-1.fc45

Imager is a module for creating and altering images. It can read and write various image formats, draw primitive shapes like lines,and polygons, blend multiple images together in various ways, scale, crop, render text and more...

CVE-2026-81180 SysReptor: Authenticated RCE by insecure image processing

SysReptor is a fully customizable pentest reporting platform. Prior to 2026.61, authenticated users of SysReptor Professional can upload image files whose formats cause image processing to invoke Ghostscript, allowing embedded PostScript to operate in the shared temporary directory. An attacker c...

ROOT-OS-DEBIAN-13-CVE-2026-56372 CVE-2026-56372 in imagemagick - Patched by Root

Root has patched CVE-2026-56372 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-61465 CVE-2026-61465 in imagemagick - Patched by Root

Root has patched CVE-2026-61465 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

CVE-2026-86882

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to...

CVE-2026-86869

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Golden Gate 27. Processing a maliciously crafted image may lead to unexpected app termination...

CVE-2026-84571

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may lead to unexpected app termination...

CVE-2026-84565

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted disk image may lead to unexpected app termination...

CVE-2026-84564

An uninitialized memory issue was addressed with improved memory initialization. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted image may result i...

CVE-2026-65395

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Processing a maliciously crafted image may result in memory corruption...