Lucene search
K

26 matches found

OSV
OSV
added 2026/03/12 2:4 p.m.1 views

GHSA-WRHR-RF8J-R842 ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.

The pcd coder lacks proper boundary checking when processing Huffman-coded data. The decoder contains an function that has an incorrect initialization that could cause an out of bounds read. ==3900053==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000003c6c at pc 0x55601b9cc552 bp...

6.5CVSS5.8AI score0.00023EPSS
Exploits0References4
OSV
OSV
added 2026/02/28 12:45 p.m.3 views

OESA-2026-1456 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

9.8CVSS6.7AI score0.00065EPSS
Exploits0References32
OSV
OSV
added 2026/02/28 12:45 p.m.3 views

OESA-2026-1454 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

9.8CVSS6.7AI score0.00065EPSS
Exploits0References32
Snyk
Snyk
added 2026/02/25 7:12 p.m.1 views

Out-of-bounds Read

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS6AI score
Exploits0References2
Snyk
Snyk
added 2026/02/25 7:12 p.m.3 views

Out-of-bounds Read

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS6AI score
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/02/25 7:12 p.m.4 views

ImageMagick: Malicious PCD files trigger 1‑byte heap Out-of-bounds Read and DoS

The PCD coder’s DecodeImage loop allows a crafted PCD file to trigger a 1‑byte heap out-of-bounds read when decoding an image Denial of service and potential disclosure of adjacent heap byte...

5.3AI score
Exploits0References4Affected Software19
OSV
OSV
added 2026/02/24 3:29 p.m.3 views

GHSA-PQGJ-2P96-RX85 ImageMagick: Infinite loop vulnerability when parsing a PCD file

When a PCD file does not contain a valid marker, the DecodeImage function becomes trapped in an infinite loop while searching for the marker, causing the program to become unresponsive and continuously consume CPU resources, ultimately leading to system resource exhaustion and denial of service...

7.5CVSS5.5AI score0.00019EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2026/02/24 3:29 p.m.9 views

ImageMagick: Infinite loop vulnerability when parsing a PCD file

When a PCD file does not contain a valid marker, the DecodeImage function becomes trapped in an infinite loop while searching for the marker, causing the program to become unresponsive and continuously consume CPU resources, ultimately leading to system resource exhaustion and denial of service...

7.5CVSS5.3AI score0.00019EPSS
Exploits0References5Affected Software19
Snyk
Snyk
added 2026/02/24 2:0 a.m.1 views

Incorrect Calculation of Buffer Size

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

9.1CVSS5.7AI score0.00023EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 2:0 a.m.2 views

Incorrect Calculation of Buffer Size

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.1CVSS5.7AI score0.00023EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 2:0 a.m.1 views

Incorrect Calculation of Buffer Size

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

9.1CVSS5.7AI score0.00023EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 2:0 a.m.2 views

Incorrect Calculation of Buffer Size

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.1CVSS5.7AI score0.00023EPSS
Exploits0References2
OSV
OSV
added 2026/02/24 1:16 a.m.2 views

UBUNTU-CVE-2026-24485

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage function becomes trapped in an infinite loop while searching for the Sync marker, causing...

7.5CVSS5.8AI score0.00019EPSS
Exploits0References6
Snyk
Snyk
added 2026/02/24 12:34 a.m.4 views

Infinite loop

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6AI score0.00019EPSS
Exploits0References2
EUVD
EUVD
added 2026/02/24 12:34 a.m.2 views

EUVD-2026-7456

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage function becomes trapped in an infinite loop while searching for the Sync marker, causing...

7.5CVSS5.3AI score0.00019EPSS
Exploits0References3
Snyk
Snyk
added 2026/02/24 12:34 a.m.2 views

Infinite loop

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6AI score0.00019EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 12:34 a.m.4 views

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop in the DecodeImage function when processing a PCD image file that lacks a valid Sync marker. An attacker can cause continuous CPU resource consumption and system resource exhaustion by submitting such a file. Workaround Th...

8.7CVSS5.5AI score0.00019EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/24 12:34 a.m.1 views

CVE-2026-24485 ImageMagick: Infinite loop vulnerability when parsing a PCD file

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage function becomes trapped in an infinite loop while searching for the Sync marker, causing...

7.5CVSS5.4AI score0.00019EPSS
Exploits0References3
Snyk
Snyk
added 2026/02/24 12:34 a.m.2 views

Infinite loop

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6AI score0.00019EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 12:34 a.m.3 views

Infinite loop

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6AI score0.00019EPSS
Exploits0References2
Rows per page
Query Builder