Lucene search
+L

417 matches found

Snyk
Snyk
added 2026/04/14 11:32 p.m.11 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS5.8AI score0.00284EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/14 11:32 p.m.13 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.3CVSS5.8AI score0.00284EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/14 11:32 p.m.12 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

6.3CVSS5.8AI score0.00284EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/14 11:32 p.m.11 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.3CVSS5.8AI score0.00284EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/04/14 11:32 p.m.17 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.3CVSS5.8AI score0.00284EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/14 11:32 p.m.9 views

GHSA-X928-4434-CRQJ ImageMagick has a memory leak in PNG encoder when writing a MNG image

When the PNG encoder fails to write an MNG image it can leak memory...

3.7CVSS5.8AI score0.00284EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/14 12:41 a.m.9 views

CLEANSTART-2026-NJ21771 png_image_free in png

Multiple security vulnerabilities affect the libpng package. pngimagefree in png. See references for individual vulnerability details...

9.8CVSS6.7AI score0.09393EPSS
SaveExploits5References7
OSV
OSV
added 2026/04/13 4:33 p.m.7 views

JLSEC-2026-96

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In versions 1.6.36 through 1.6.55, an out-of-bounds read and write exists in libpng's ARM/AArch64 Neon-optimized palette expansion path. When expanding 8-bit...

7.6CVSS6AI score0.00738EPSS
SaveExploits0References3
Fedora
Fedora
added 2026/04/10 1:11 a.m.16 views

[SECURITY] Fedora 42 Update: libpng15-1.5.30-25.fc42

The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG Portable Network Graphics image format files. This version should be used only if you are unable to use the current version of libpng...

8.3CVSS6AI score0.00955EPSS
SaveExploits1
OSV
OSV
added 2026/04/09 3:16 p.m.7 views

ALPINE-CVE-2026-34757

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.0.9 to before 1.6.57, passing a pointer obtained from pnggetPLTE, pnggettRNS, or pnggethIST back into the corresponding setter on the same...

4.4CVSS6AI score0.00195EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/04/09 2:41 p.m.58 views

CVE-2026-34757 LIBPNG has a yse-after-free in png_set_PLTE, png_set_tRNS and png_set_hIST leading to corrupted chunk data and potential heap information disclosure

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.0.9 to before 1.6.57, passing a pointer obtained from pnggetPLTE, pnggettRNS, or pnggethIST back into the corresponding setter on the same...

5.1CVSS0.00195EPSS
SaveExploits1References5
EUVD
EUVD
added 2026/04/09 2:41 p.m.6 views

EUVD-2026-20897

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.0.9 to before 1.6.57, passing a pointer obtained from pnggetPLTE, pnggettRNS, or pnggethIST back into the corresponding setter on the same...

5.1CVSS6AI score0.00195EPSS
SaveExploits1References5
ATTACKERKB
ATTACKERKB
added 2026/04/09 2:41 p.m.5 views

CVE-2026-34757

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.0.9 to before 1.6.57, passing a pointer obtained from pnggetPLTE, pnggettRNS, or pnggethIST back into the corresponding setter on the same...

5.1CVSS6AI score0.00195EPSS
SaveExploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2026/04/09 12:0 a.m.13 views

PT-2026-31620

Name of the Vulnerable Software and Affected Versions LIBPNG versions 1.0.9 through 1.6.56 Description LIBPNG is a library used by applications to read, create, and manipulate PNG image files. A flaw exists where passing a pointer obtained from png get PLTE, png get tRNS, or png get hIST back int...

5.1CVSS6AI score0.00195EPSS
SaveExploits1References123
RedHat Linux
RedHat Linux
added 2026/04/07 6:21 a.m.7 views

libpng: LIBPNG heap buffer overflow

A buffer overflow flaw has been discovered in libpng. There is a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated...

7.1CVSS6.5AI score0.00253EPSS
SaveExploits4References9
Redos
Redos
added 2026/04/01 12:0 a.m.13 views

ROS-20260401-73-0025

A vulnerability in the pngsetquantize function of the libpng PNG raster graphics library is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code using a specially generated PNG file...

8.3CVSS6.5AI score0.00955EPSS
SaveExploits1
Redos
Redos
added 2026/04/01 12:0 a.m.11 views

ROS-20260401-73-0026

A vulnerability in the pngsetquantize function of the libpng PNG raster graphics library is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code using a specially generated PNG file...

8.3CVSS6.6AI score0.00955EPSS
SaveExploits1
Redos
Redos
added 2026/04/01 12:0 a.m.10 views

ROS-20260401-73-0013

A vulnerability in the pngimagefinishread function of the pngimagefinishread library for handling bitmap graphics in the PNG libpng format is related to writing beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by loading a...

7.1CVSS6.3AI score0.00253EPSS
SaveExploits4
Redos
Redos
added 2026/04/01 12:0 a.m.8 views

ROS-20260401-73-0017

A vulnerability in the pngdoquantize function of the pngrtran.c component of the PNG Libpng bitmap graphics library is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability may allow an attacker to gain access to confidential data and cause a denial of...

6.1CVSS6AI score0.00187EPSS
SaveExploits2
Redos
Redos
added 2026/04/01 12:0 a.m.10 views

ROS-20260401-73-0021

A vulnerability in the PNG raster graphics library Libpng is related to reading outside of the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data and cause a denial of service...

6.1CVSS6AI score0.00137EPSS
SaveExploits2
Rows per page
Query Builder