Lucene search
K

35 matches found

OSV
OSV
added 2026/03/13 2:40 p.m.4 views

CLSA-2026-1773412800 Fix CVE(s): CVE-2026-25795

SECURITY UPDATE: nULL pointer dereference and crash during image read when temporary file creation fails - debian/patches/CVE-2026-25795.patch: Destroy readinfo after copying filename and avoid NULL pointer dereference in ReadSFWImage; cause: incorrect order of operations when temporary file...

7.5CVSS7.2AI score0.00376EPSS
Exploits0References1
OSV
OSV
added 2026/03/04 5:32 p.m.4 views

CLSA-2026-1772452097 ImageMagick: Fix of 9 CVEs

CVE-2026-25798: fix NULL pointer dereference in ClonePixelCacheRepository - CVE-2026-24481: fix heap information disclosure in PSD handler - CVE-2026-25799: fix division-by-zero in YUV sampling factor validation - CVE-2026-26284: fix out-of-bounds read in PCD Huffman decoder - CVE-2026-25897: fix...

9.8CVSS6.8AI score0.00429EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/02/26 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-25795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage...

7.5CVSS7.2AI score0.00376EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/02/25 12:24 a.m.2 views

SUSE CVE-2026-25795

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

5.3CVSS5.8AI score0.00376EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2026/02/24 3:32 p.m.7 views

ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

In ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereference and crash. AddressSanitizer:DEADLYSIGNAL ================================================================= ==1414421==ERROR:...

7.5CVSS5.3AI score0.00376EPSS
Exploits0References6Affected Software18
NVD
NVD
added 2026/02/24 1:16 a.m.5 views

CVE-2026-25795

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

7.5CVSS0.00376EPSS
Exploits0References1
OSV
OSV
added 2026/02/24 1:16 a.m.1 views

DEBIAN-CVE-2026-25795

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

7.5CVSS7.7AI score0.00376EPSS
Exploits0References1
OSV
OSV
added 2026/02/24 1:16 a.m.3 views

UBUNTU-CVE-2026-25795

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

7.5CVSS5.8AI score0.00376EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/02/24 12:54 a.m.18 views

CVE-2026-25795 ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

5.3CVSS0.00376EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/24 12:54 a.m.3 views

CVE-2026-25795 ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

5.3CVSS5.9AI score0.00376EPSS
Exploits0References1
EUVD
EUVD
added 2026/02/24 12:54 a.m.4 views

EUVD-2026-7447

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

7.5CVSS5.3AI score0.00376EPSS
Exploits0References1
CVE
CVE
added 2026/02/24 12:54 a.m.20 views

CVE-2026-25795

ImageMagick vulnerability CVE-2026-25795 affects the ReadSFWImage() path (coders/sfw.c): when temporary-file creation fails, read_info is destroyed before its filename is accessed, causing a NULL pointer dereference and crash. A patch is stated for versions 7.1.2-15 and 6.9.13-40. Connected advis...

7.5CVSS5.3AI score0.00376EPSS
Exploits0References1Affected Software1
Debian CVE
Debian CVE
added 2026/02/24 12:54 a.m.3 views

CVE-2026-25795

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

7.5CVSS7.7AI score0.00376EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2026/02/24 12:54 a.m.3 views

CVE-2026-25795

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

7.5CVSS5.5AI score0.00376EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2026/02/24 12:0 a.m.2 views

CVE-2026-25795

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, in ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereferen...

7.5CVSS5.9AI score0.00376EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/02/24 12:0 a.m.7 views

ImageMagick 代码问题漏洞

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It allows for reading, converting, and writing images in various formats. Versions of ImageMagick prior to 7.1.2-15 and 6.9.13-40 contained code vulnerabilities. These vulnerabilities stemmed from...

7.5CVSS7.3AI score0.00376EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.6 views

PT-2026-21601

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a flaw exists in the ReadSFWImage...

9.8CVSS6AI score0.00594EPSS
Exploits0References172
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-17309

Malware in sbrugna...

6.5CVSS6.9AI score0.01935EPSS
Exploits0References8
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.32 views

SUSE: Security Advisory (SUSE-SU-2017:1599-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.7AI score0.0476EPSS
Exploits2References26
Tenable Nessus
Tenable Nessus
added 2017/12/21 12:0 a.m.62 views

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2017:3388-1)

This update for ImageMagick fixes the following issues : - CVE-2017-14989: use-after-free in RenderFreetype in MagickCore/annotate.c could lead to denial of service bsc1061254 - CVE-2017-14682: GetNextToken in MagickCore/token.c heap buffer overflow could lead to denial of service bsc1060176 -...

9.8CVSS6.9AI score0.03397EPSS
Exploits14References98
Rows per page
Query Builder