Lucene search
+L

54 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•9 views

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF encoder, an out-of-bounds write vulnerability could occur due to a missing check. This issue has been fixed in versions...

5.5CVSS5.7AI score0.00148EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/25 3:07 p.m.•57 views

CVE-2026-15310 zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

When decompressing crafted zip files using the bzip/LZMA/Zstandard compressions, Python could use an attacker-controlled size to pre-allocate memory, possibly resulting in memory exhaustion...

2.1CVSS5.6AI score
SaveExploits0References16
SUSE Linux
SUSE Linux
•added 2026/07/15 9:49 a.m.•16 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues CVE-2026-42050: stack buffer overflow in XTileImage bsc1265048. CVE-2026-42326: information disclosure via malicious IPTC input file bsc1268092. CVE-2026-45031: denial of Service due to resource policy bypass in PSD decoder bsc1268094...

7.3CVSS6.2AI score0.01934EPSS
SaveExploits4References110
OSV
OSV
•added 2026/07/15 9:49 a.m.•8 views

SUSE-SU-2026:3024-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues - CVE-2026-42050: stack buffer overflow in XTileImage bsc1265048. - CVE-2026-42326: information disclosure via malicious IPTC input file bsc1268092. - CVE-2026-45031: denial of Service due to resource policy bypass in PSD decoder bsc1268094. ...

9.2CVSS6.3AI score0.01934EPSS
SaveExploits4References56
OSV
OSV
•added 2026/07/15 9:48 a.m.•7 views

SUSE-SU-2026:3023-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues - CVE-2026-42050: stack buffer overflow in XTileImage bsc1265048. - CVE-2026-42326: information disclosure via malicious IPTC input file bsc1268092. - CVE-2026-45031: denial of Service due to resource policy bypass in PSD decoder bsc1268094. ...

9.2CVSS6.3AI score0.01934EPSS
SaveExploits5References83
OSV
OSV
•added 2026/06/26 9:13 a.m.•11 views

OPENSUSE-SU-2026:21071-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues Security issues: - CVE-2026-42050: Stack buffer overflow in XTileImage bsc1265048. - CVE-2026-42326: Information disclosure via malicious IPTC input file bsc1268092. - CVE-2026-45031: Denial of Service due to resource policy bypass in PSD...

9.1CVSS6.2AI score0.01934EPSS
SaveExploits4References64
Tenable Nessus
Tenable Nessus
•added 2026/06/26 12:00 a.m.•19 views

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:2580-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2580-1 advisory. This update for ImageMagick fixes the following issues This update for ImageMagick fixes the following issues ...

7.5CVSS6.3AI score0.01934EPSS
SaveExploits4References88
SUSE Linux
SUSE Linux
•added 2026/06/23 1:25 p.m.•20 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues This update for ImageMagick fixes the following issues CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing bsc1262154. CVE-2026-33900: Denial of Service via integer truncation in viff encoder bsc1262156. CVE-2026-33901:...

8.7CVSS6.1AI score0.01934EPSS
SaveExploits4References116
Tenable Nessus
Tenable Nessus
•added 2026/06/22 12:00 a.m.•34 views

Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2026-1826)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1826 advisory. When writing an IPTC output file a malicious input file could cause an out of bounds read of a single byte. as per:...

7.5CVSS6.5AI score0.01934EPSS
SaveExploits4References32
NVD
NVD
•added 2026/06/10 11:16 p.m.•18 views

CVE-2026-46521

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check. This issue has been patched in versions 6.9.13-48 and...

5.5CVSS0.00148EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/10 9:40 p.m.•21 views

EUVD-2026-36171

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check. This issue has been patched in versions 6.9.13-48 and...

5.5CVSS5.7AI score0.00148EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/10 9:40 p.m.•82 views

CVE-2026-46521

CVE-2026-46521 affects ImageMagick: a heap buffer over-write in the MIFF encoder when using LZMA compression due to a missing check. Exploitation is local with low complexity and requires user interaction, potentially impacting availability. A patch is available: fixed in ImageMagick versions 6.9...

5.5CVSS5.7AI score0.00148EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/06/10 9:40 p.m.•75 views

CVE-2026-46521 ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check. This issue has been patched in versions 6.9.13-48 and...

5.5CVSS0.00148EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/06/10 9:40 p.m.•15 views

CVE-2026-46521 ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check. This issue has been patched in versions 6.9.13-48 and...

5.5CVSS5.7AI score0.00148EPSS
SaveExploits0References1
OSV
OSV
•added 2026/06/10 9:40 p.m.•14 views

CVE-2026-46521 ImageMagick: Heap Buffer Over-Write in MIFF encoder when using LZMA compression

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check. This issue has been patched in versions 6.9.13-48 and...

5.5CVSS6.1AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/10 12:00 a.m.•3 views

CVE-2026-46521: Incorrect Calculation of Buffer Size

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check. This issue has been patched in versions 6.9.13-48 and...

5.5CVSS5.7AI score0.00148EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/05/22 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-46521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA...

5.5CVSS5.7AI score0.00148EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/05/20 5:53 a.m.•14 views

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: erofs: corrected incorrect kunmap when using LZMA on HIGHMEM platforms As shown in the call trace, the root cause is incorrect pages handled by kunmap: BUG: Kernel NULL pointer dereferencing, address: 00000000 CPU: 1 PID: 40 Comm...

5.5CVSS5.9AI score0.00185EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/05/18 8:36 p.m.•18 views

Infinite loop

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.7AI score0.00148EPSS
SaveExploits0References5
Snyk
Snyk
•added 2026/05/18 8:36 p.m.•19 views

Infinite loop

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

6.8CVSS5.7AI score0.00148EPSS
SaveExploits0References5
Rows per page
Query Builder