Lucene search
+L

342 matches found

Github Security Blog
Github Security Blog
added 2026/04/14 11:31 p.m.15 views

ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete

The patch for GHSA-7h7q-j33q-hvpf was incomplete and still allows a stack buffer overflow for the multi frame images...

6AI score
SaveExploits0References2Affected Software18
OSV
OSV
added 2026/04/14 11:31 p.m.12 views

GHSA-98CP-RJ9F-6V5G ImageMagick has has a stack-buffer-overflow in MNG encoder with oversized pallete

The patch for GHSA-7h7q-j33q-hvpf was incomplete and still allows a stack buffer overflow for the multi frame images...

6.9CVSS6AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/14 12:00 a.m.9 views

SUSE SLES15 Security Update : GraphicsMagick (SUSE-SU-2026:1300-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1300-1 advisory. - CVE-2026-26284: heap overflow in pcd decoder leads to out of bounds read bsc1258765. - CVE-2026-28690: missing bounds check in the MNG encode...

9.1CVSS6.1AI score0.00404EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/04/14 12:00 a.m.16 views

PT-2026-54044

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-19 Description A memory leak exists in the PNG encoder when writing MNG images. An attacker can trigger an encoder failure condition to exhaust memory resources, resulting in a denial of service...

7.5CVSS6AI score0.01849EPSS
SaveExploits4References114
SUSE Linux
SUSE Linux
added 2026/04/13 3:58 p.m.6 views

Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: CVE-2026-26284: heap overflow in pcd decoder leads to out of bounds read bsc1258765. CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow bsc1259456. Patch Instructions: To install this SUSE update u...

8.8CVSS6AI score0.00404EPSS
SaveExploits0References8
OSV
OSV
added 2026/04/13 3:58 p.m.7 views

SUSE-SU-2026:1300-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: - CVE-2026-26284: heap overflow in pcd decoder leads to out of bounds read bsc1258765. - CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow bsc1259456...

9.1CVSS6AI score0.00404EPSS
SaveExploits0References5
SUSE Linux
SUSE Linux
added 2026/04/07 12:25 p.m.11 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write bsc1259446. CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow bsc1259447. CVE-2026-28686:...

8.8CVSS6.1AI score0.00475EPSS
SaveExploits0References80
OSV
OSV
added 2026/04/07 12:24 p.m.8 views

SUSE-SU-2026:1203-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write bsc1259446. - CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow bsc1259447. -...

8.1CVSS6AI score0.00475EPSS
SaveExploits0References41
OSV
OSV
added 2026/04/07 12:24 p.m.4 views

SUSE-SU-2026:1202-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion bsc1258790. - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write bsc1259446. - CVE-2026-28494: missing bounds chec...

9.8CVSS6AI score0.00475EPSS
SaveExploits0References46
SUSE Linux
SUSE Linux
added 2026/04/07 12:24 p.m.7 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion bsc1258790. CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow bsc1259447...

8.8CVSS6.1AI score0.00401EPSS
SaveExploits0References60
OSV
OSV
added 2026/04/07 12:24 p.m.7 views

SUSE-SU-2026:1201-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion bsc1258790. - CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow bsc1259447. -...

8.1CVSS6AI score0.00401EPSS
SaveExploits0References31
NVD
NVD
added 2026/04/05 9:16 p.m.11 views

CVE-2019-25690

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mngprofileid parameter. Attackers can send crafted requests with malicious SQL payloads in the mngprofileid parameter to extract sensitive database...

8.8CVSS0.00311EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2026/04/05 8:45 p.m.6 views

CVE-2019-25690

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mngprofileid parameter. Attackers can send crafted requests with malicious SQL payloads in the mngprofileid parameter to extract sensitive database...

8.8CVSS6AI score0.00311EPSS
SaveExploits1References4
OSV
OSV
added 2026/03/27 12:17 p.m.4 views

OPENSUSE-SU-2026:20441-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: - CVE-2026-25799: Division-by-Zero in YUV sampling factor validation leads to crash bsc1258786. - CVE-2026-28690: missing bounds check in the MNG encoder can lead to a stack buffer overflow bsc1259456. - CVE-2026-30883: missing bounds che...

7.8CVSS6.1AI score0.00385EPSS
SaveExploits0References6
Mageia
Mageia
added 2026/03/25 5:31 p.m.10 views

Updated graphicsmagick packages fix security vulnerabilities

GraphicsMagick has a stack write buffer overflow in MNG encoder. CVE-2026-28690 GraphicsMagick has a Heap Overflow when writing extremely large image profile in the PNG encoder. CVE-2026-30883...

7.8CVSS6AI score0.00123EPSS
SaveExploits0References2
OSV
OSV
added 2026/03/25 5:31 p.m.12 views

MGASA-2026-0067 Updated graphicsmagick packages fix security vulnerabilities

GraphicsMagick has a stack write buffer overflow in MNG encoder. CVE-2026-28690 GraphicsMagick has a Heap Overflow when writing extremely large image profile in the PNG encoder. CVE-2026-30883...

7.8CVSS6.1AI score0.00123EPSS
SaveExploits0References3
OSV
OSV
added 2026/03/20 9:31 a.m.5 views

OPENSUSE-SU-2026:20405-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion bsc1258790. - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write bsc1259446. - CVE-2026-28494: missing bounds chec...

8.1CVSS6.1AI score0.00401EPSS
SaveExploits0References36
OSV
OSV
added 2026/03/12 2:11 p.m.9 views

GHSA-7H7Q-J33Q-HVPF ImageMagick has stack write buffer overflow in MNG encoder

A stack buffer overflow vulnerability exists in the MNG encoder. There is a bounds checks missing that could corrupting the stack with attacker-controlled data. ==2265506==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffec4971310 at pc 0x55e671b8a072 bp 0x7ffec4970f70 sp...

6.9CVSS6AI score0.00096EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/03/12 2:11 p.m.20 views

EUVD-2026-10383

ImageMagick has stack write buffer overflow in MNG encoder...

6.9CVSS6AI score0.00096EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/03/11 12:24 a.m.11 views

SUSE CVE-2026-28690

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow vulnerability exists in the MNG encoder. There is a bounds checks missing that could corrupting the stack with attacker-controlled data...

8.6CVSS6AI score0.00096EPSS
SaveExploits0References9
Rows per page
Query Builder