Lucene search
+L

124 matches found

CNVD
CNVD
•added 2025/08/20 12:00 a.m.•15 views

ImageMagick Input Validation Error Vulnerability (CNVD-2025-19250)

ImageMagick is ImageMagick open source suite of open source image processing software that can read, convert or write images in a variety of formats. ImageMagick suffers from an input validation error vulnerability that stems from an insecure magnification size calculation in ReadOneMNGIMage, whi...

8.8CVSS6.8AI score0.00961EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2025/08/14 2:53 a.m.•15 views

SUSE CVE-2025-55154

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage in coders/png.c are unsafe and can overflow, leading to memory corruption. This issue has been patched in...

7.8CVSS6.8AI score0.00961EPSS
SaveExploits1References10
NVD
NVD
•added 2025/08/13 2:15 p.m.•16 views

CVE-2025-55004

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in ReadOneMNGIMage. This c...

7.6CVSS0.00545EPSS
SaveExploits1References2
OSV
OSV
•added 2025/08/13 2:15 p.m.•11 views

UBUNTU-CVE-2025-55154

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage in coders/png.c are unsafe and can overflow, leading to memory corruption. This issue has been patched in...

8.8CVSS5.7AI score0.00961EPSS
SaveExploits1References5
OSV
OSV
•added 2025/08/13 2:15 p.m.•14 views

UBUNTU-CVE-2025-55004

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in ReadOneMNGIMage. This c...

7.6CVSS5.8AI score0.00545EPSS
SaveExploits1References4
CVE
CVE
•added 2025/08/13 2:00 p.m.•99 views

CVE-2025-55154

ImageMagick vulnerability CVE-2025-55154 affects the ReadOneMNGIMage path (coders/png.c) where magnified size calculations can overflow, leading to memory corruption. This is fixed in ImageMagick releases 6.9.13-27 and 7.1.2-1. Affected products/versions should upgrade to these patched releases o...

8.8CVSS7AI score0.00961EPSS
SaveExploits1References3Affected Software1
AlpineLinux
AlpineLinux
•added 2025/08/13 2:00 p.m.•13 views

CVE-2025-55154

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage in coders/png.c are unsafe and can overflow, leading to memory corruption. This issue has been patched in...

8.8CVSS7.2AI score0.00961EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2025/08/13 2:00 p.m.•9 views

CVE-2025-55154

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage in coders/png.c are unsafe and can overflow, leading to memory corruption. This issue has been patched in...

8.8CVSS8AI score0.00961EPSS
SaveExploits1
Cvelist
Cvelist
•added 2025/08/13 2:00 p.m.•44 views

CVE-2025-55154 ImageMagick: integer overflows in MNG magnification

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage in coders/png.c are unsafe and can overflow, leading to memory corruption. This issue has been patched in...

8.8CVSS0.00961EPSS
SaveExploits1References2
CVE
CVE
•added 2025/08/13 1:59 p.m.•209 views

CVE-2025-55004

ImageMagick before 7.1.2-1 is affected by CVE-2025-55004, a heap-buffer overflow/ read-around issue in ReadOneMNGImage when handling images with separate alpha channels during magnification. This can leak memory contents into the output image. The issue is fixed in 7.1.2-1. Affected advisories in...

7.6CVSS7.2AI score0.00545EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/08/13 12:00 a.m.•10 views

PT-2025-32997

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.13-27 ImageMagick versions prior to 7.1.2-1 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. The magnified size calculations in the ReadOneMNGImage...

10CVSS6.7AI score0.00961EPSS
SaveExploits2References98
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/13 12:00 a.m.•1 views

CVE-2025-55004: Heap-based Buffer Overflow

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in ReadOneMNGIMage. This c...

7.6CVSS5.5AI score0.00545EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/13 12:00 a.m.•1 views

CVE-2025-55154: Integer Overflow or Wraparound

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage in coders/png.c are unsafe and can overflow, leading to memory corruption. This issue has been patched in...

8.8CVSS5.5AI score0.00961EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/13 12:00 a.m.•6 views

ImageMagick 输入验证错误漏洞

ImageMagick is ImageMagick open source suite of open source image processing software that can read, convert or write images in a variety of formats. ImageMagick suffers from an input validation error vulnerability that stems from an insecure magnification size calculation in ReadOneMNGIMage, whi...

8.8CVSS6.8AI score0.00961EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•11 views

PT-2025-32995

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.1.2-1 Description: ImageMagick is vulnerable to a heap-buffer overflow read when handling images with separate alpha channels during image magnification in the ReadOneMNGImage function. This issue can potential...

9CVSS6.6AI score0.00545EPSS
SaveExploits1References74
SUSE CVE
SUSE CVE
•added 2023/02/15 4:42 a.m.•11 views

SUSE CVE-2017-11526

The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service large loop and CPU consumption via a crafted file...

6.5CVSS8.7AI score0.02915EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 4:41 a.m.•14 views

SUSE CVE-2017-12673

In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service...

5.3CVSS6.6AI score0.01107EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2023/02/15 4:38 a.m.•7 views

SUSE CVE-2017-15017

ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c...

5.3CVSS9.1AI score0.02037EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2023/02/15 4:36 a.m.•9 views

SUSE CVE-2017-17887

In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage...

6.5CVSS8.6AI score0.01308EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2023/02/15 4:28 a.m.•7 views

SUSE CVE-2018-10177

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

5.5CVSS8.6AI score0.03067EPSS
SaveExploits1References6
Rows per page
Query Builder