Lucene search
+L

16179 matches found

Github Security Blog
Github Security Blog
•added 2026/02/24 3:29 p.m.•32 views

ImageMagick: Infinite loop vulnerability when parsing a PCD file

When a PCD file does not contain a valid marker, the DecodeImage function becomes trapped in an infinite loop while searching for the marker, causing the program to become unresponsive and continuously consume CPU resources, ultimately leading to system resource exhaustion and denial of service...

7.5CVSS7.3AI score0.00468EPSS
SaveExploits0References5Affected Software19
RedhatCVE
RedhatCVE
•added 2026/02/24 6:36 a.m.•16 views

CVE-2026-26283

A flaw was found in ImageMagick. An attacker can exploit this vulnerability by providing a specially crafted image. This crafted image can trigger an infinite loop within the JPEG encoder, causing the software to consume 100% of the CPU and become unresponsive. This leads to a Denial of Service...

7.5CVSS6.6AI score0.00354EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/02/24 6:35 a.m.•14 views

CVE-2026-26066

A flaw was found in ImageMagick. A local attacker could provide a crafted image profile containing invalid IPTC International Press Telecommunications Council data. When ImageMagick attempts to write this data using the IPTCTEXT function, it may lead to an infinite loop, resulting in a Denial of...

7.5CVSS6.6AI score0.00358EPSS
SaveExploits0References4
NVD
NVD
•added 2026/02/24 3:16 a.m.•27 views

CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

7.5CVSS0.00354EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/02/24 3:16 a.m.•14 views

DEBIAN-CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

7.5CVSS6.8AI score0.00354EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/24 3:16 a.m.•25 views

CVE-2026-26066

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted profile contain invalid IPTC data may cause an infinite loop when writing it with IPTCTEXT. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

7.5CVSS0.00358EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/02/24 3:16 a.m.•22 views

DEBIAN-CVE-2026-26066

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted profile contain invalid IPTC data may cause an infinite loop when writing it with IPTCTEXT. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

7.5CVSS6.8AI score0.00358EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/02/24 3:16 a.m.•17 views

UBUNTU-CVE-2026-26066

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted profile contain invalid IPTC data may cause an infinite loop when writing it with IPTCTEXT. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

7.5CVSS6.8AI score0.00358EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2026/02/24 1:55 a.m.•17 views

CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

7.5CVSS6.8AI score0.00354EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2026/02/24 1:55 a.m.•14 views

CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

7.5CVSS6.8AI score0.00354EPSS
SaveExploits0
osv_cve
osv_cve
•added 2026/02/24 1:55 a.m.•16 views

CVE-2026-26283 ImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent`

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

6.2CVSS5.6AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/02/24 1:55 a.m.•7 views

CVE-2026-26283 ImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent`

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

6.2CVSS6.8AI score0.00354EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/02/24 1:55 a.m.•21 views

EUVD-2026-7414

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

7.5CVSS6.8AI score0.00354EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/24 1:55 a.m.•18 views

CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

7.5CVSS6.8AI score0.00354EPSS
SaveExploits0References2Affected Software1
Snyk
Snyk
•added 2026/02/24 1:52 a.m.•22 views

Infinite loop

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

7.5CVSS6.7AI score0.00358EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 1:52 a.m.•13 views

Infinite loop

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS6.7AI score0.00358EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/24 1:52 a.m.•16 views

CVE-2026-26066

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted profile contain invalid IPTC data may cause an infinite loop when writing it with IPTCTEXT. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

7.5CVSS6.8AI score0.00358EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/02/24 1:52 a.m.•55 views

CVE-2026-26066 ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted profile contain invalid IPTC data may cause an infinite loop when writing it with IPTCTEXT. Versions 7.1.2-15 and 6.9.13-40 contain a patch...

6.2CVSS0.00358EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/02/24 1:52 a.m.•17 views

Infinite loop

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS6.7AI score0.00358EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/24 1:52 a.m.•70 views

CVE-2026-26066

CVE-2026-26066 affects ImageMagick. A crafted IPTC profile with invalid IPTC data can cause an infinite loop when writing with IPTCTEXT. A patch exists in versions 7.1.2-15 and 6.9.13-40; remediation is to update ImageMagick to a fixed release (or newer) to mitigate the DoS risk from endless proc...

7.5CVSS6.8AI score0.00358EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder