CVE-2026-77467

Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript but does not apply an effective pre-render limit to PDF page dimensions in ImagickHandler::loadPdf. An authenticated user who can upload a small PDF with an oversized...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free software available as a ready-to-run binary distribution or as source code that you can use, copy, modify, and distribute in both open and proprietary applications. In affected versions, Postscript files may be read and written when specifically excluded by a module policy in...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick version 7.0.11. In this version, an integer overflow in the WriteTHUMBNAILImage function in the coders/thumbnail.c file may lead to undefined behavior when processing a specially crafted image file submitted by an attacker. The greatest threat posed by this...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, a flaw in the MIFF decoder allowed a malicious file to create an infinite loop, leading to CPU exhaustion. Versions 7.1.2.23 and 6.9.13-48 have fixed this issue...

Automate_Exploit_CVE-2022-44268

CVE-2022-44268 Automation Script - Quick Guide Credits Original Exploit: VoidZone Security https://git.rotfl.io/v/CVE-2022-44268.git This Python script automates their PoC for file exfiltration. Description This script automates the exploitation of CVE-2022-44268 ImageMagick file disclosure. 1...

CVE-2022-44268

CVE-2022-44268 ImageMagick 7.1.0-49 vulnerable to Information Disclosure Usage exploit.sh sh exploit.sh Output image is stored in output.png getdata.sh sh getdata.sh Source https://www.metabaseq.com/threat/imagemagick-zero-days/...

CVE-2025-66628

CVE-2025-66628: Integer Overflow in ImageMagick TIM Parser Attribute| Details ---|--- CVE ID| CVE-2025-66628 Vendor| ImageMagick Studio LLC Product| ImageMagick Affected Versions| 7.1.2-10 Fixed Version| 7.1.2-10 Vulnerability Type| CWE-190 Integer Overflow CVSS v3.1 Score| 7.5 High CVSS Vector|...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-130357)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130357 advisory. ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who supplies a...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-130377)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130377 advisory. ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use TOCTOU vulnerability in the video decoder that allows attackers to bypass path policy...

Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-130376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130376 advisory. ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the GetLis...

CVE-2022-44268-

CVE-2022-44268- For HTB practice How to use this python3 poc.py generate -o test.png -r /etc/passwd Upload that test.png file and download python3 poc.py parse -i out.png...

CVE-2026-109964

A flaw was found in ImageMagick. A remote attacker can exploit this vulnerability to achieve arbitrary code execution or trigger an application crash, resulting in a denial of service DoS. By providing a specially crafted PICT image file with manipulated dimension values, an integer overflow occu...

Buffer Underwrite (Buffer Underflow)

Overview Affected versions of this package are vulnerable to Buffer Underwrite Buffer Underflow via the DecodeImage function in coders/pict.c due to pointer arithmetic overflow. An attacker can cause memory corruption or execute arbitrary code by supplying a crafted PICT file with maximized row,...

DEBIAN-CVE-2026-109964

ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and...

CVE-2026-109964

ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and...

UBUNTU-CVE-2026-109964

ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and...

CVE-2026-109964

ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and...

CVE-2026-109964

ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and...

EUVD-2026-98684

ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and...

CVE-2026-109964 ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder

ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and...