Lucene search
+L

15421 matches found

Github Security Blog
Github Security Blog
added 2026/05/22 1:14 p.m.31 views

ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model

The distributed pixel cache was originally designed to operate without a challenge–response authentication model. However, given today’s heightened security expectations, we have changed our implementation...

4.1CVSS5.8AI score0.00109EPSS
SaveExploits0References3Affected Software17
OSV
OSV
added 2026/05/22 1:14 p.m.23 views

GHSA-2RGJ-GX5X-F62W ImageMagick: Information Disclosure in distributed pixel cache server because it is not using a challenge–response authentication model

The distributed pixel cache was originally designed to operate without a challenge–response authentication model. However, given today’s heightened security expectations, we have changed our implementation...

4.1CVSS5.8AI score0.00109EPSS
SaveExploits0References3
OSV
OSV
added 2026/05/22 1:11 p.m.21 views

GHSA-4G75-9R48-JF92 ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking

An attacker who can connect to a magick -distribute-cache service can hijack a file descriptor in the server process when a race condition is met...

4.1CVSS5.8AI score0.00077EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/05/22 1:11 p.m.26 views

ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking

An attacker who can connect to a magick -distribute-cache service can hijack a file descriptor in the server process when a race condition is met...

4.1CVSS5.8AI score0.00077EPSS
SaveExploits0References3Affected Software17
OSV
OSV
added 2026/05/22 1:10 p.m.16 views

GHSA-P93H-F2JC-477J ImageMagick: Heap Buffer Over-Write in distributed pixel cache server

An attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-write in the server process...

4.1CVSS5.9AI score0.00092EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/22 1:10 p.m.18 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.3CVSS5.9AI score0.00092EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/22 11:11 a.m.23 views

OESA-2026-2387 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS5.9AI score0.01849EPSS
SaveExploits4References16
OSV
OSV
added 2026/05/22 11:11 a.m.25 views

OESA-2026-2388 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

7.5CVSS5.9AI score0.01849EPSS
SaveExploits4References17
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-46522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, due to a missing check ...

7.5CVSS7AI score0.01849EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-46557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-23, due to a missing depth check a stack...

6.2CVSS6.5AI score0.0012EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:00 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-42326

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC...

5.1CVSS6AI score0.0012EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-46520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading multiple...

7.5CVSS7AI score0.00441EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:00 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-46559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an incorrect check in t...

4CVSS6AI score0.00116EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:00 a.m.12 views

Linux Distros Unpatched Vulnerability : CVE-2026-46521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA...

5.5CVSS6AI score0.00111EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/05/21 9:49 p.m.25 views

ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse

The PasskeyEncipherImage method is vulnerable to information disclosure via AES-CTR nonce reuse. ImageMagick has update the documentation on its website to make it more clear that this is happening: https://imagemagick.org/cipher/...

5.8AI score
SaveExploits0References3Affected Software17
OSV
OSV
added 2026/05/21 9:49 p.m.20 views

GHSA-QV2Q-C278-PCH5 ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse

The PasskeyEncipherImage method is vulnerable to information disclosure via AES-CTR nonce reuse. ImageMagick has update the documentation on its website to make it more clear that this is happening: https://imagemagick.org/cipher/...

3.7CVSS5.8AI score0.00229EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/05/21 9:43 p.m.17 views

ImageMagick: Division by Zero in binomial kernel

An user supplied large binomial kernel could result in an overflow that would lead to a division by zero...

5.9AI score
SaveExploits0References2Affected Software17
OSV
OSV
added 2026/05/21 9:43 p.m.9 views

GHSA-VF33-6R7X-66XX ImageMagick: Division by Zero in binomial kernel

An user supplied large binomial kernel could result in an overflow that would lead to a division by zero...

3.3CVSS5.9AI score0.00111EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/05/21 9:42 p.m.21 views

ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix

An incorrect fix that was applied in GHSA-5592-p365-24xh could result in a heap buffer over-write of a single byte...

5.9AI score
SaveExploits0References3Affected Software17
OSV
OSV
added 2026/05/21 9:42 p.m.11 views

GHSA-JQQ5-8PX3-9M6M ImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix

An incorrect fix that was applied in GHSA-5592-p365-24xh could result in a heap buffer over-write of a single byte...

6.2CVSS5.9AI score
SaveExploits0References3
Rows per page
Query Builder