Lucene search
+L

4090 matches found

SUSE Linux
SUSE Linux
•added 2025/09/10 6:01 p.m.•13 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels bsc1248076. CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces bsc1248077...

9CVSS7AI score0.0449EPSS
SaveExploits7References28
OSV
OSV
•added 2025/09/10 6:01 p.m.•9 views

SUSE-SU-2025:03151-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels bsc1248076. - CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces bsc1248077. -...

8.8CVSS7.2AI score0.0449EPSS
SaveExploits7References15
SUSE Linux
SUSE Linux
•added 2025/09/10 5:58 p.m.•8 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces bsc1248077. CVE-2025-55154: Fixed integer overflow when performing magnified size calculations in ReadOneMNGIMage bsc1248078. CVE-2025-55160: Fixed...

9CVSS7AI score0.0449EPSS
SaveExploits6References24
OSV
OSV
•added 2025/09/10 5:58 p.m.•10 views

SUSE-SU-2025:03150-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces bsc1248077. - CVE-2025-55154: Fixed integer overflow when performing magnified size calculations in ReadOneMNGIMage bsc1248078. - CVE-2025-55160: Fix...

8.8CVSS7AI score0.0449EPSS
SaveExploits6References13
BDU FSTEC
BDU FSTEC
•added 2025/09/10 12:00 a.m.•15 views

The vulnerability of the InterpretImageFilename function in the console-based image editing tool ImageMagick allows a hacker to gain unauthorized access to protected information.

The vulnerability of the InterpretImageFilename function in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

10CVSS6AI score0.00684EPSS
SaveExploits1References14Affected Software8
BDU FSTEC
BDU FSTEC
•added 2025/09/10 12:00 a.m.•16 views

The vulnerability of the console-based graphic editor ImageMagick, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to an uncontrolled resource consumption when processing the packetsize parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

2.9CVSS5.8AI score0.00414EPSS
SaveExploits0References6Affected Software3
SUSE Linux
SUSE Linux
•added 2025/09/09 10:25 a.m.•5 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels bsc1248076. CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces bsc1248077...

9CVSS7AI score0.0449EPSS
SaveExploits7References28
Amazon
Amazon
•added 2025/09/08 12:00 a.m.•11 views

Important: ImageMagick

Issue Overview: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage in coders/png.c are unsafe and can overflow, leading to memory corruption. This issue has been...

8.8CVSS6.7AI score0.00961EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/09/08 12:00 a.m.•20 views

Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2025-1159)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1159 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage in coders/png....

8.8CVSS8AI score0.00961EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2025/09/08 12:00 a.m.•10 views

The vulnerability of the ReadOneMNGIMage function in the console-based ImageMagick graphics editor, related to buffer overflow in dynamic memory, allows an attacker to exploit the memory contents of the processes.

The vulnerability of the ReadOneMNGIMage function in the console-based ImageMagick graphics editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to disclose the contents of process memory...

9CVSS6.3AI score0.00545EPSS
SaveExploits1References14Affected Software7
BDU FSTEC
BDU FSTEC
•added 2025/09/08 12:00 a.m.•11 views

The vulnerability of the console-based graphic editor ImageMagick lies in its dependence on behaviors that are uncertain for each implementation type. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the console-based graphic editor ImageMagick is related to its dependence on behaviors that are uncertain for each implementation type. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

6.1CVSS6.4AI score0.00414EPSS
SaveExploits1References16Affected Software8
OSV
OSV
•added 2025/09/05 10:15 p.m.•5 views

DEBIAN-CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS4.9AI score0.00294EPSS
SaveExploits1References1
OSV
OSV
•added 2025/09/05 9:16 p.m.•10 views

CVE-2025-57807 ImageMagick BlobStream Forward-Seek Under-Allocation

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

3.8CVSS6.4AI score
SaveExploits0References5
CVE
CVE
•added 2025/09/05 9:16 p.m.•142 views

CVE-2025-57807

CVE-2025-57807 affects ImageMagick versions lower than 14.8.2. The vulnerability arises from insecure functions SeekBlob() and WriteBlob(): SeekBlob() allows advancing the stream offset beyond the current end without increasing capacity, and WriteBlob() expands by quantum + length instead of offs...

9.8CVSS6.2AI score0.00294EPSS
SaveExploits1References3Affected Software1
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•11 views

Out-of-bounds Write

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•4 views

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write in the WriteBlob function. An attacker can achieve memory corruption, by manipulating the stream offset using a forward seek beyond the current buffer extent and then performing a write operation. This allows writing...

9.8CVSS6.8AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•12 views

Out-of-bounds Write

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•9 views

Out-of-bounds Write

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•12 views

Out-of-bounds Write

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•9 views

Out-of-bounds Write

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Rows per page
Query Builder