Lucene search
K

16 matches found

AstraLinux
AstraLinux
added 2026/06/19 11:10 a.m.5 views

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions of ImageMagick below 14.8.2 include insecure functions: SeekBlob, which allows advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which expands the...

9.8CVSS5.9AI score0.00274EPSS
Exploits1References2
SUSE CVE
SUSE CVE
added 2026/05/20 2:40 a.m.7 views

SUSE CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

4.2CVSS6.5AI score0.00274EPSS
Exploits1References7
Redos
Redos
added 2025/10/30 12:0 a.m.2 views

ROS-20251030-07

The vulnerability of SeekBlob and WriteBlob functions of ImageMagick console graphic editor is related to writing outside of buffer boundaries. Exploitation of the vulnerability could allow a remote attacker, execute arbitrary code...

9.8CVSS7.6AI score0.00274EPSS
Exploits1
Redos
Redos
added 2025/10/30 12:0 a.m.2 views

ROS-20251030-08

The vulnerability of SeekBlob and WriteBlob functions of ImageMagick console graphic editor is related to writing outside of buffer boundaries. Exploitation of the vulnerability could allow a remote attacker, execute arbitrary code...

9.8CVSS7.6AI score0.00274EPSS
Exploits1
Veracode
Veracode
added 2025/10/13 6:32 a.m.7 views

Heap-based Buffer Overflow

ImageMagick is vulnerable to a heap-based buffer overflow. The vulnerability is due to improper memory handling in the SeekBlob and WriteBlob functions, which allows an attacker to write data beyond allocated memory, potentially leading to arbitrary code execution or application crashes...

9.8CVSS8.1AI score0.00274EPSS
Exploits1References5Affected Software12
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-27126

Malicious code in bioql PyPI...

9.8CVSS6.2AI score0.00274EPSS
Exploits1References2
OSV
OSV
added 2025/09/12 2:24 p.m.3 views

OESA-2025-2246 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

9.8CVSS6.8AI score0.00274EPSS
Exploits1References2
NVD
NVD
added 2025/09/05 10:15 p.m.7 views

CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS0.00274EPSS
Exploits1References3
OSV
OSV
added 2025/09/05 10:15 p.m.3 views

UBUNTU-CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS5.8AI score0.00274EPSS
Exploits1References7
Cvelist
Cvelist
added 2025/09/05 9:16 p.m.6 views

CVE-2025-57807 ImageMagick BlobStream Forward-Seek Under-Allocation

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

3.8CVSS0.00274EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2025/09/05 9:16 p.m.3 views

CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS4.9AI score0.00274EPSS
Exploits1
AlpineLinux
AlpineLinux
added 2025/09/05 9:16 p.m.1 views

CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS6.8AI score0.00274EPSS
Exploits1References3
OSV
OSV
added 2025/09/05 8:9 p.m.2 views

GHSA-23HG-53Q6-HQFG ImageMagick BlobStream Forward-Seek Under-Allocation

Reporter: Lumina Mescuwa Product: ImageMagick 7 MagickCore Component: MagickCore/blob.c Blob I/O - BlobStream Tested: 7.1.2-0 source tag and 7.1.2-1 Homebrew, macOS arm64, clang-17, Q16-HDRI Impact: Heap out-of-bounds WRITE attacker-controlled bytes at attacker-chosen offset → memory corruption;...

3.8CVSS7.8AI score0.00274EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2025/09/05 8:9 p.m.10 views

ImageMagick BlobStream Forward-Seek Under-Allocation

Reporter: Lumina Mescuwa Product: ImageMagick 7 MagickCore Component: MagickCore/blob.c Blob I/O - BlobStream Tested: 7.1.2-0 source tag and 7.1.2-1 Homebrew, macOS arm64, clang-17, Q16-HDRI Impact: Heap out-of-bounds WRITE attacker-controlled bytes at attacker-chosen offset → memory corruption;...

9.8CVSS7.8AI score0.00274EPSS
Exploits1References5Affected Software12
Positive Technologies
Positive Technologies
added 2025/09/05 12:0 a.m.6 views

PT-2025-36333

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 14.8.2 Description ImageMagick is free and open-source software used for editing and manipulating digital images. The software includes insecure functions: SeekBlob, which allows advancing the stream offset beyond...

9.8CVSS6.7AI score0.04065EPSS
Exploits10References77
CNNVD
CNNVD
added 2025/09/05 12:0 a.m.2 views

ImageMagick 缓冲区错误漏洞

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert, or write images in a variety of formats. A buffer error vulnerability exists in versions of ImageMagick prior to 14.8.2, which stems from insecure SeekBlob and WriteBlob functions...

9.8CVSS6.4AI score0.00274EPSS
Exploits1References3
Rows per page
Query Builder