Lucene search
+L

18 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•7 views

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions of ImageMagick below 14.8.2 contain insecure functions: SeekBlob, which allows advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which expands the...

9.8CVSS7.2AI score0.00294EPSS
SaveExploits1References2
OSV
OSV
•added 2026/07/30 4:02 p.m.•9 views

JLSEC-2026-926 ImageMagick BlobStream Forward-Seek Under-Allocation

Reporter: Lumina Mescuwa Product: ImageMagick 7 MagickCore Component: MagickCore/blob.c Blob I/O - BlobStream Tested: 7.1.2-0 source tag and 7.1.2-1 Homebrew, macOS arm64, clang-17, Q16-HDRI Impact: Heap out-of-bounds WRITE attacker-controlled bytes at attacker-chosen offset → memory corruption;...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References5
SUSE CVE
SUSE CVE
•added 2026/05/20 2:40 a.m.•16 views

SUSE CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

4.2CVSS6.5AI score0.00294EPSS
SaveExploits1References7
Redos
Redos
•added 2025/10/30 12:00 a.m.•8 views

ROS-20251030-08

The vulnerability of SeekBlob and WriteBlob functions of ImageMagick console graphic editor is related to writing outside of buffer boundaries. Exploitation of the vulnerability could allow a remote attacker, execute arbitrary code...

9.8CVSS7.6AI score0.00294EPSS
SaveExploits1
Redos
Redos
•added 2025/10/30 12:00 a.m.•9 views

ROS-20251030-07

The vulnerability of SeekBlob and WriteBlob functions of ImageMagick console graphic editor is related to writing outside of buffer boundaries. Exploitation of the vulnerability could allow a remote attacker, execute arbitrary code...

9.8CVSS7.6AI score0.00294EPSS
SaveExploits1
Veracode
Veracode
•added 2025/10/13 6:32 a.m.•12 views

Heap-based Buffer Overflow

ImageMagick is vulnerable to a heap-based buffer overflow. The vulnerability is due to improper memory handling in the SeekBlob and WriteBlob functions, which allows an attacker to write data beyond allocated memory, potentially leading to arbitrary code execution or application crashes...

9.8CVSS8.1AI score0.00294EPSS
SaveExploits1References5Affected Software12
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•7 views

EUVD-2025-27126

Malicious code in bioql PyPI...

9.8CVSS6.2AI score0.00294EPSS
SaveExploits1References2
OSV
OSV
•added 2025/09/12 11:09 a.m.•8 views

OESA-2025-2246 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

3.8CVSS6.8AI score0.00294EPSS
SaveExploits1References2
NVD
NVD
•added 2025/09/05 10:15 p.m.•15 views

CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS0.00294EPSS
SaveExploits1References3
OSV
OSV
•added 2025/09/05 10:15 p.m.•20 views

UBUNTU-CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS5.8AI score0.00294EPSS
SaveExploits1References7
AlpineLinux
AlpineLinux
•added 2025/09/05 9:16 p.m.•7 views

CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS6.8AI score0.00294EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/09/05 9:16 p.m.•35 views

CVE-2025-57807 ImageMagick BlobStream Forward-Seek Under-Allocation

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

3.8CVSS0.00294EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2025/09/05 9:16 p.m.•12 views

CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS4.9AI score0.00294EPSS
SaveExploits1
OSV
OSV
•added 2025/09/05 8:09 p.m.•4 views

GHSA-23HG-53Q6-HQFG ImageMagick BlobStream Forward-Seek Under-Allocation

Reporter: Lumina Mescuwa Product: ImageMagick 7 MagickCore Component: MagickCore/blob.c Blob I/O - BlobStream Tested: 7.1.2-0 source tag and 7.1.2-1 Homebrew, macOS arm64, clang-17, Q16-HDRI Impact: Heap out-of-bounds WRITE attacker-controlled bytes at attacker-chosen offset → memory corruption;...

3.8CVSS7.8AI score0.00294EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2025/09/05 8:09 p.m.•27 views

ImageMagick BlobStream Forward-Seek Under-Allocation

Reporter: Lumina Mescuwa Product: ImageMagick 7 MagickCore Component: MagickCore/blob.c Blob I/O - BlobStream Tested: 7.1.2-0 source tag and 7.1.2-1 Homebrew, macOS arm64, clang-17, Q16-HDRI Impact: Heap out-of-bounds WRITE attacker-controlled bytes at attacker-chosen offset → memory corruption;...

9.8CVSS7.8AI score0.00294EPSS
SaveExploits1References5Affected Software12
CNNVD
CNNVD
•added 2025/09/05 12:00 a.m.•8 views

ImageMagick 缓冲区错误漏洞

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert, or write images in a variety of formats. A buffer error vulnerability exists in versions of ImageMagick prior to 14.8.2, which stems from insecure SeekBlob and WriteBlob functions...

9.8CVSS6.4AI score0.00294EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/05 12:00 a.m.•2 views

CVE-2025-57807: Out-of-bounds Write

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS5.7AI score0.00294EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/09/05 12:00 a.m.•24 views

PT-2025-36333

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 14.8.2 Description ImageMagick is free and open-source software used for editing and manipulating digital images. The software includes insecure functions: SeekBlob, which allows advancing the stream offset beyond...

9.8CVSS6.7AI score0.0449EPSS
SaveExploits10References77
Rows per page
Query Builder