Lucene search
+L

68 matches found

Positive Technologies
Positive Technologies
•added 2026/10/15 12:00 a.m.•13 views

PT-2026-115368

Name of the Vulnerable Software and Affected Versions Sliver versions prior to 1.7.3 Description Sliver is subject to a Denial of Service DoS issue where an unauthenticated user can exhaust the server's RAM, potentially crashing the host device. The issue occurs when an open HTTP listener receive...

8.2CVSS5.8AI score
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/10/13 4:35 p.m.•8 views

SUSE CVE-2026-109260

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...

3.7CVSS5.3AI score0.00366EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/10/12 6:50 p.m.•17 views

CVE-2026-109260

A flaw was found in ImageMagick. A memory leak in the PNG encoder allows a remote attacker to cause a Denial of Service DoS. When library initialization fails during PNG encoding operations, allocated memory is not released. By repeatedly triggering these failed encoding requests, an attacker can...

6.3CVSS5.5AI score0.00366EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/12 5:17 p.m.•16 views

CVE-2026-109260

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...

6.3CVSS0.00366EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2026/10/12 5:17 p.m.•22 views

DEBIAN-CVE-2026-109260

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...

6.3CVSS5.3AI score0.00366EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/10/12 5:17 p.m.•9 views

CVE-2026-109260

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...

6.3CVSS5.6AI score0.00366EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2026/10/12 5:17 p.m.•8 views

UBUNTU-CVE-2026-109260

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...

6.3CVSS5.3AI score0.00366EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/12 4:04 p.m.•18 views

CVE-2026-109260 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in PNG Encoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...

6.3CVSS5.3AI score0.00366EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/12 4:04 p.m.•20 views

CVE-2026-109260

The ImageMagick library versions prior to 6.9.13-57 and 7.x before 7.1.2-32 are vulnerable to a memory leak within the PNG encoder . The root cause is a failure to release allocated memory when libpng initialization fails. An attacker capable of repeatedly triggering PNG encoding operations that ...

6.3CVSS5.3AI score0.00366EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/10/12 4:04 p.m.•41 views

CVE-2026-109260 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in PNG Encoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...

6.3CVSS0.00366EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/10/12 4:04 p.m.•14 views

EUVD-2026-97704

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...

6.3CVSS5.3AI score0.00366EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/12 12:00 a.m.•9 views

PT-2026-110677

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-57 ImageMagick versions prior to 7.1.2-32 Description A memory leak exists in the PNG encoder that occurs when libpng initialization fails, preventing the release of allocated memory. An attacker can cause ...

6.9CVSS5.5AI score0.00384EPSS
SaveExploits0References83
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•13 views

CVE-2026-109260: Missing Release of Memory after Effective Lifetime

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...

6.3CVSS5.3AI score0.00366EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/09/04 12:00 a.m.•15 views

ImageMagick PNG Encoder DoS

The vulnerability of the PNG encoder in the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the module. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.3CVSS6.2AI score0.00284EPSS
SaveExploits0References4Affected Software3
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•7 views

PT-2026-76086

ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG images. Attackers can trigger the encoder failure condition to exhaust memory resources and cause denial of service...

6.3CVSS5.4AI score0.00284EPSS
SaveExploits0References5
NVD
NVD
•added 2026/07/24 8:18 p.m.•23 views

CVE-2026-66040

FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple I...

8.8CVSS0.00776EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/07/24 8:18 p.m.•18 views

CVE-2026-66040

FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple I...

8.8CVSS8.2AI score0.00776EPSS
SaveExploits0References4
Mend
Mend
•added 2026/07/24 7:46 p.m.•8 views

CVE-2026-66040

FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple I...

8.8CVSS8.4AI score0.00776EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/24 12:00 a.m.•12 views

CVE-2026-66040: Heap-based Buffer Overflow

FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple I...

8.8CVSS8.4AI score0.00776EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/07/02 6:35 a.m.•19 views

SUSE CVE-2026-56365

ImageMagick before 7.1.2-19 contains a memory leak vulnerability in the PNG encoder when writing MNG images. Attackers can trigger the encoder failure condition to exhaust memory resources and cause denial of service...

3.7CVSS5.3AI score0.00284EPSS
SaveExploits0References8
Rows per page
Query Builder