Lucene search
+L

28 matches found

OSV
OSV
added 2026/07/30 4:2 p.m.5 views

JLSEC-2026-943 ImageMagick has memory leak in msl encoder

Memory leak exists in coders/msl.c. In the WriteMSLImage function of the msl.c file, resources are allocated. But the function returns early without releasing these allocated resources. ==78983== Memcheck, a memory error detector ==78983== Copyright C 2002-2022, and GNU GPL'd, by Julian Seward et...

5.3CVSS6.7AI score0.00325EPSS
SaveExploits0References5
AstraLinux
AstraLinux
added 2026/06/24 3:11 p.m.11 views

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, there was a heap-use-after-free vulnerability in the MSL encoder, where a cloned image was destroyed twice. The MSL encoder does not support writing MSL files, ...

5.3CVSS7AI score0.00193EPSS
SaveExploits0References3
OSV
OSV
added 2026/04/20 4:15 p.m.5 views

SUSE-SU-2026:1497-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested MVG to SVG conversion bsc1258790. - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write bsc1259446. - CVE-2026-28494: missing bounds checks in the...

8.1CVSS6AI score0.00475EPSS
SaveExploits0References43
Tenable Nessus
Tenable Nessus
added 2026/04/10 12:0 a.m.7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-007084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007084 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free...

5.3CVSS5.8AI score0.00193EPSS
SaveExploits0References4
Amazon
Amazon
added 2026/04/01 12:0 a.m.14 views

Important: ImageMagick

Issue Overview: A flaw was found in ImageMagick. An integer overflow vulnerability exists in the SIXEL decoder, which allows a remote attacker to perform an out-of-bounds write via a specially crafted image. This can lead to a Denial of Service DoS and potentially information disclosure...

8.1CVSS6.5AI score0.00353EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/01 12:0 a.m.14 views

Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2026-1500)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1500 advisory. A flaw was found in ImageMagick. An integer overflow vulnerability exists in the SIXEL decoder, which allows a remote attacker to perform an out-of-bounds write via a specially crafted image...

8.1CVSS7.7AI score0.00353EPSS
SaveExploits0References34
EUVD
EUVD
added 2026/03/12 2:11 p.m.7 views

EUVD-2026-10379

ImageMagick has heap use-after-free in the MSL encoder...

5.3CVSS5.8AI score0.00193EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/03/11 12:24 a.m.7 views

SUSE CVE-2026-28688

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write...

5.1CVSS5.7AI score0.00193EPSS
SaveExploits0References8
OSV
OSV
added 2026/03/10 7:43 a.m.9 views

UBUNTU-CVE-2026-28688

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write...

5.3CVSS5.7AI score0.00193EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/10 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-28688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free...

5.3CVSS6.4AI score0.00193EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/03/09 9:38 p.m.6 views

CVE-2026-28688

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write...

5.3CVSS7.6AI score0.00193EPSS
SaveExploits0
CVE
CVE
added 2026/03/09 9:38 p.m.199 views

CVE-2026-28688

CVE-2026-28688 is a heap-use-after-free in ImageMagick’s MSL encoder where a cloned image is destroyed twice. The vulnerability affects ImageMagick prior to versions 7.1.2-16 and 6.9.13-41, and is addressed by upgrading to 7.1.2-16 or 6.9.13-41 (per the CVE description). Connected advisories (Deb...

5.3CVSS5.7AI score0.00193EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
added 2026/03/09 9:38 p.m.20 views

Use After Free

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.5CVSS5.8AI score0.00193EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/03/09 9:38 p.m.9 views

Use After Free

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.5CVSS5.8AI score0.00193EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/03/09 9:38 p.m.9 views

Use After Free

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.5CVSS5.8AI score0.00193EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/03/09 9:38 p.m.6 views

EUVD-2026-10380

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write...

4CVSS5.7AI score0.00193EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/03/09 9:38 p.m.13 views

Use After Free

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

5.5CVSS5.8AI score0.00193EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/03/09 9:38 p.m.13 views

Use After Free

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.5CVSS5.8AI score0.00193EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/03/09 9:38 p.m.10 views

Use After Free

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

5.5CVSS5.8AI score0.00193EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/03/09 9:38 p.m.8 views

Use After Free

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.5CVSS5.8AI score0.00193EPSS
SaveExploits0References2
Rows per page
Query Builder