122 matches found
CVE-2026-33536 ImageMagick has an Out-of-bounds Write via InterpretImageFilename
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, due to an incorrect return value on certain platforms a pointer is incremented past the end of a buffer that is on the stack and that could result in an out of bounds...
CVE-2026-33536 ImageMagick has an Out-of-bounds Write via InterpretImageFilename
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, due to an incorrect return value on certain platforms a pointer is incremented past the end of a buffer that is on the stack and that could result in an out of bounds...
CVE-2026-33536
Summary: ImageMagick is affected in versions prior to 7.1.2-18 and 6.9.13-43. due to an incorrect return value on certain platforms, a pointer can be incremented past the end of a stack buffer, resulting in an out-of-bounds write via InterpretImageFilename. The issue is fixed in 7.1.2-18 and 6.9....
Out-of-bounds Write
Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...
Out-of-bounds Write
Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...
Out-of-bounds Write
Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
EUVD-2026-16368
ImageMagick has an Out-of-bounds Write via InterpretImageFilename...
ImageMagick has an Out-of-bounds Write via InterpretImageFilename
Due to an incorrect return value on certain platforms a pointer is incremented past the end of a buffer that is on the stack and that could result in an out of bounds write. ================================================================= ==48558==ERROR: AddressSanitizer: stack-buffer-overflow o...
GHSA-8793-7XV6-82CF ImageMagick has an Out-of-bounds Write via InterpretImageFilename
Due to an incorrect return value on certain platforms a pointer is incremented past the end of a buffer that is on the stack and that could result in an out of bounds write. ================================================================= ==48558==ERROR: AddressSanitizer: stack-buffer-overflow o...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write due to an incorrect return value on certain platforms, which causes a pointer to be incremented past the end of a stack buffer in the InterpretImageFilename function. An attacker can cause a denial of service or...
MiracleLinux 7 : ImageMagick-6.9.10.68-7.0.3.el7.AXS7 (AXSA:2025-10859:01)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10859:01 advisory. CVE-2025-53014: fix heap buffer overflow in InterpretImageFilename CVEs: CVE-2025-53014 ImageMagick is free and open-source software used for editing and...
EUVD-2025-176386
Malicious code in sigma-query-interpret-phi-process npm...
EUVD-2025-180175
Malicious code in awk-node-abstract-interpret-alert npm...
EUVD-2025-179055
Malicious code in error-root-long-sigma-interpret npm...
EUVD-2025-179416
Malicious code in daemon-old-mu-interpret-deserialize npm...
EUVD-2025-178369
Malicious code in interpret-deploy-omega-async-fire npm...
Malicious code in promise-interpret-cache-final-process (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9605759b1020adeb5ec89f5a9efb1c8e482a5658943df0515f8cd42b73f4425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-179688
Malicious code in code-interpret-finally-decode-cold npm...