Lucene search
+L

1225 matches found

Snyk
Snyk
added 2026/01/20 12:48 a.m.2 views

Release of Invalid Pointer or Reference

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

9.8CVSS5.7AI score0.00336EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/01/20 12:48 a.m.2 views

Release of Invalid Pointer or Reference

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS5.7AI score0.00336EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/01/20 12:48 a.m.6 views

Release of Invalid Pointer or Reference

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

9.8CVSS5.7AI score0.00336EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/01/20 12:48 a.m.2 views

CVE-2026-22770 ImageMagick vulnerable to Release of Invalid Pointer in BilateralBlur when memory allocation fails

ImageMagick is free and open-source software used for editing and manipulating digital images. The BilateralBlurImage method will allocate a set of double buffers inside AcquireBilateralTLS. But, in versions prior to 7.1.2-13, the last element in the set is not properly initialized. This will...

6.5CVSS5.5AI score0.00336EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/20 12:48 a.m.3 views

EUVD-2026-3401

ImageMagick is free and open-source software used for editing and manipulating digital images. The BilateralBlurImage method will allocate a set of double buffers inside AcquireBilateralTLS. But, in versions prior to 7.1.2-13, the last element in the set is not properly initialized. This will...

6.5CVSS5.4AI score0.00336EPSS
SaveExploits0References5
Snyk
Snyk
added 2026/01/20 12:48 a.m.5 views

Release of Invalid Pointer or Reference

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS5.7AI score0.00336EPSS
SaveExploits0References2
CVE
CVE
added 2026/01/20 12:48 a.m.48 views

CVE-2026-22770

CVE-2026-22770 affects ImageMagick: in BilateralBlurImage, the last element of a double-buffer set isn’t properly initialized inside AcquireBilateralTLS, leading to an invalid pointer being freed in DestroyBilateralTLS when memory allocation fails. The issue is fixed in version 7.1.2-13. Connecte...

9.8CVSS5.5AI score0.00336EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.9 views

MiracleLinux 9 : openssl-3.0.1-47.el9 (AXSA:2023-5192:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5192:01 advisory. openssl: read buffer overflow in X.509 certificate verification CVE-2022-4203 openssl: timing attack in RSA Decryption implementation CVE-2022-4304...

7.5CVSS7.7AI score0.59501EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2026/01/20 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-22770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. The BilateralBlurImage method will allocate a set of double buffe...

9.8CVSS6.6AI score0.00336EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.4 views

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001394)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001394 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is an invalid pointer dereference in delrelocroot in fs/btrfs/relocation.c when mounting a crafted...

7.1CVSS6.5AI score0.02691EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001277)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001277 advisory. The xfsdinodeverify function in fs/xfs/libxfs/xfsinodebuf.c in the Linux kernel through 4.16.3 allows local users to cause a denial of service xfsilockattrmapshared...

5.5CVSS6.4AI score0.00509EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
added 2026/01/09 8:57 a.m.8 views

CVE-2023-4883

Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the correct operation of the service by sending a specially crafted json string to the VNF Virtual Network Function, and triggering the ogssbimessagefree function, which could cause a...

7.5CVSS6.8AI score0.00515EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/02 4:27 p.m.13 views

CVE-2025-48768

Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fsinoderemove code of the Apache NuttX RTOS that allowed root filesystem inode removal leading to a debug assert trigger that is disabled by default, NULL pointer dereference handled differently depending on the targ...

6.5CVSS7.2AI score0.00758EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/01 5:15 p.m.7 views

CVE-2025-48768

Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fsinoderemove code of the Apache NuttX RTOS that allowed root filesystem inode removal leading to a debug assert trigger that is disabled by default, NULL pointer dereference handled differently depending on the targ...

6.5CVSS0.00758EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/01/01 4:14 p.m.7 views

EUVD-2026-0013

Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fsinoderemove code of the Apache NuttX RTOS that allowed root filesystem inode removal leading to a debug assert trigger that is disabled by default, NULL pointer dereference handled differently depending on the targ...

6.5AI score0.00758EPSS
SaveExploits0References4
OSV
OSV
added 2026/01/01 4:14 p.m.6 views

CVE-2025-48768 Apache NuttX RTOS: fs/inode: fs_inoderemove root inode removal

Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fsinoderemove code of the Apache NuttX RTOS that allowed root filesystem inode removal leading to a debug assert trigger that is disabled by default, NULL pointer dereference handled differently depending on the targ...

5.3CVSS6AI score0.00758EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.7 views

PT-2026-21718

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Firefox ESR versions prior to 140.8 Thunderbird versions prior to 148 Thunderbird versions prior to 140.8 Description The JavaScript Engine component contains an invalid pointer issue. Recommendations Update Firef...

10CVSS5.1AI score0.00604EPSS
SaveExploits0References218
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.10 views

PT-2026-4954

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.1.1, 3.0, 3.3, 3.4, and 3.5 OpenSSL versions 3.6 through 3.6.0 Description An invalid or NULL pointer dereference can occur in applications processing malformed PKCS12 files. This can lead to a denial of service when an...

9.8CVSS5.9AI score0.47621EPSS
SaveExploits8References108
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.5 views

PT-2026-4955

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.2 through 3.6 Description A type confusion issue exists in the signature verification of signed PKCS7 data. This occurs when an ASN1 TYPE union member is accessed without first validating the type, potentially leading to a...

9.8CVSS5.9AI score0.47621EPSS
SaveExploits8References105
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.7 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an invalid pointer in net-gen after an opsinit failure, which could lead to reuse after release...

6.1AI score0.00187EPSS
SaveExploits0References7
Rows per page
Query Builder