Lucene search
+L

29 matches found

AstraLinux
AstraLinux
added 2026/08/10 7:11 a.m.13 views

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, there was a heap-use-after-free vulnerability in the MSL encoder, where a cloned image was destroyed twice. The MSL encoder does not support writing MSL, so the...

5.3CVSS6.3AI score0.00193EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/30 4:02 p.m.7 views

JLSEC-2026-943 ImageMagick has memory leak in msl encoder

Memory leak exists in coders/msl.c. In the WriteMSLImage function of the msl.c file, resources are allocated. But the function returns early without releasing these allocated resources. ==78983== Memcheck, a memory error detector ==78983== Copyright C 2002-2022, and GNU GPL'd, by Julian Seward et...

5.3CVSS6.7AI score0.00325EPSS
SaveExploits0References5
OSV
OSV
added 2026/04/20 4:15 p.m.6 views

SUSE-SU-2026:1497-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested MVG to SVG conversion bsc1258790. - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write bsc1259446. - CVE-2026-28494: missing bounds checks in the...

8.1CVSS6AI score0.00475EPSS
SaveExploits0References43
Tenable Nessus
Tenable Nessus
added 2026/04/10 12:00 a.m.9 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-007084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007084 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free...

5.3CVSS5.8AI score0.00193EPSS
SaveExploits0References4
Amazon
Amazon
added 2026/04/01 12:00 a.m.17 views

Important: ImageMagick

Issue Overview: A flaw was found in ImageMagick. An integer overflow vulnerability exists in the SIXEL decoder, which allows a remote attacker to perform an out-of-bounds write via a specially crafted image. This can lead to a Denial of Service DoS and potentially information disclosure...

8.1CVSS6.5AI score0.00353EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/01 12:00 a.m.16 views

Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2026-1500)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1500 advisory. A flaw was found in ImageMagick. An integer overflow vulnerability exists in the SIXEL decoder, which allows a remote attacker to perform an out-of-bounds write via a specially crafted image...

8.1CVSS7.7AI score0.00353EPSS
SaveExploits0References34
OSV
OSV
added 2026/03/15 7:32 a.m.5 views

OESA-2026-1623 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

8.1CVSS6AI score0.00353EPSS
SaveExploits0References14
EUVD
EUVD
added 2026/03/12 2:11 p.m.9 views

EUVD-2026-10379

ImageMagick has heap use-after-free in the MSL encoder...

5.3CVSS5.8AI score0.00193EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/03/11 12:24 a.m.8 views

SUSE CVE-2026-28688

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write...

5.1CVSS5.7AI score0.00193EPSS
SaveExploits0References8
OSV
OSV
added 2026/03/10 7:43 a.m.11 views

UBUNTU-CVE-2026-28688

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write...

5.3CVSS5.7AI score0.00193EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/10 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-28688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free...

5.3CVSS6.4AI score0.00193EPSS
SaveExploits0References3
CVE
CVE
added 2026/03/09 9:38 p.m.212 views

CVE-2026-28688

CVE-2026-28688 is a heap-use-after-free in ImageMagick’s MSL encoder where a cloned image is destroyed twice. The vulnerability affects ImageMagick prior to versions 7.1.2-16 and 6.9.13-41, and is addressed by upgrading to 7.1.2-16 or 6.9.13-41 (per the CVE description). Connected advisories (Deb...

5.3CVSS5.7AI score0.00193EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
added 2026/03/09 9:38 p.m.10 views

Use After Free

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.5CVSS5.8AI score0.00193EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/03/09 9:38 p.m.10 views

Use After Free

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.5CVSS5.8AI score0.00193EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/03/09 9:38 p.m.25 views

Use After Free

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.5CVSS5.8AI score0.00193EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/03/09 9:38 p.m.7 views

CVE-2026-28688

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write...

5.3CVSS7.6AI score0.00193EPSS
SaveExploits0
Snyk
Snyk
added 2026/03/09 9:38 p.m.11 views

Use After Free

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

5.5CVSS5.8AI score0.00193EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/03/09 9:38 p.m.5 views

CVE-2026-28688 ImageMagick has a heap use-after-free in the MSL encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write...

4CVSS5.7AI score0.00193EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/03/09 9:38 p.m.11 views

Use After Free

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.5CVSS5.8AI score0.00193EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/03/09 9:38 p.m.19 views

Use After Free

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

5.5CVSS5.8AI score0.00193EPSS
SaveExploits0References2
Rows per page
Query Builder