EUVD-2026-40447

ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark function when parsing malformed OpenCL device profile XML files with unclosed device elements. Attackers with write access to the OpenCL cache directory can place malicious XML files to exhaust memory an...

EUVD-2025-210392

picklescan before 0.0.29 fails to detect the built-in python profile.Profile.run function when used in pickle reduce methods, allowing attackers to execute arbitrary code. Remote attackers can craft malicious pickle files that bypass picklescan detection and achieve code execution upon...

PT-2026-54852

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-51 ImageMagick versions prior to 7.1.2-26 Description A use-after-free occurs when identifying an image containing a crafted 8BIM profile with a specific format string. Use-after-free is a memory corruption...

CVE-2026-56364

ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark function when parsing malformed OpenCL device profile XML files with unclosed device elements. Attackers with write access to the OpenCL cache directory can place malicious XML files to exhaust memory an...

CVE-2026-56364

ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark function when parsing malformed OpenCL device profile XML files with unclosed device elements. Attackers with write access to the OpenCL cache directory can place malicious XML files to exhaust memory an...

CVE-2025-71363

picklescan before 0.0.30 fails to detect cProfile.run function calls in pickle reduce methods, allowing attackers to execute arbitrary code. Remote attackers can craft malicious pickle files with cProfile.run payloads that bypass picklescan detection and achieve code execution upon deserializatio...

CVE-2025-71374

picklescan before 0.0.29 fails to detect the built-in python profile.Profile.run function when used in pickle reduce methods, allowing attackers to execute arbitrary code. Remote attackers can craft malicious pickle files that bypass picklescan detection and achieve code execution upon...

CVE-2026-56364

ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark function when parsing malformed OpenCL device profile XML files with unclosed device elements. Attackers with write access to the OpenCL cache directory can place malicious XML files to exhaust memory an...

CVE-2025-71374 picklescan - Arbitrary Code Execution via Undetected profile.Profile.run

picklescan before 0.0.29 fails to detect the built-in python profile.Profile.run function when used in pickle reduce methods, allowing attackers to execute arbitrary code. Remote attackers can craft malicious pickle files that bypass picklescan detection and achieve code execution upon...

CVE-2025-71374

CVE-2025-71374 affects picklescan prior to 0.0.29. The library fails to detect the built-in Python profile.Profile.run function when used in pickle reduce methods, enabling remote attackers to craft malicious pickle files that bypass detection and achieve code execution upon deserialization. The ...

CVE-2025-71374 picklescan - Arbitrary Code Execution via Undetected profile.Profile.run

picklescan before 0.0.29 fails to detect the built-in python profile.Profile.run function when used in pickle reduce methods, allowing attackers to execute arbitrary code. Remote attackers can craft malicious pickle files that bypass picklescan detection and achieve code execution upon...

CVE-2025-71363

CVE-2025-71363 affects the picklescan tool prior to 0.0.30. It fails to detect cProfile.run calls within pickle reduce methods, enabling remote attackers to craft malicious pickle files with cProfile.run payloads that bypass picklescan detection and cause code execution during deserialization.

CVE-2026-13207

creationtimestamp| type| source ---|---|--- 2026-06-30 21:58:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjypslrgv2d 2026-07-01 02:36:42+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-181-02...

CVE-2026-10562

creationtimestamp| type| source ---|---|--- 2026-06-30 21:56:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjymnc2dq25...

CVE-2025-36321

creationtimestamp| type| source ---|---|--- 2026-06-30 21:51:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjye4qp2y2b 2026-07-01 18:56:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpm6zlqvbs26...

CVE-2026-11367

creationtimestamp| type| source ---|---|--- 2026-06-30 19:17:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpjppwjmog2l...

CVE-2026-58375

creationtimestamp| type| source ---|---|--- 2026-06-30 18:40:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjnp7uyku23...

CVE-2026-58376

creationtimestamp| type| source ---|---|--- 2026-06-30 18:30:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjn5cyb4w2m 2026-07-03 10:06:32+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpqce4xggx2r 2026-07-03 10:06:33+00:00| seen|...

CVE-2026-58371

creationtimestamp| type| source ---|---|--- 2026-06-30 18:14:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjm7xuynj24 2026-07-02 05:52:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpndoycmhy2i...

CVE-2026-58174

creationtimestamp| type| source ---|---|--- 2026-06-30 18:03:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpjln3piyx2z 2026-07-02 06:06:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnei2e2a52k...