CVE-2026-109263

ImageMagick versions prior to 6.9.13-57 and 7.x before 7.1.2-32 are vulnerable to a memory leak within the YUV encoder . The issue occurs because the encoder fails to release allocated memory when a specific operation fails. An attacker can provide crafted input to trigger this failure, leading t...

CVE-2026-109263 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in YUV Encoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting...

EUVD-2026-97706

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder WriteSVGImage that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of...

CVE-2026-109262 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in SVG Encoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder WriteSVGImage that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of...

CVE-2026-109262

The ImageMagick image processing library contains a memory leak vulnerability in the SVG encoder (specifically the WriteSVGImage function). The flaw occurs because the software fails to release allocated memory when processing specially crafted image files. An unauthenticated attacker can exploit...

CVE-2026-109262 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in SVG Encoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder WriteSVGImage that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of...

CVE-2026-109260 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in PNG Encoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...

CVE-2026-109260

The ImageMagick library versions prior to 6.9.13-57 and 7.x before 7.1.2-32 are vulnerable to a memory leak within the PNG encoder . The root cause is a failure to release allocated memory when libpng initialization fails. An attacker capable of repeatedly triggering PNG encoding operations that ...

EUVD-2026-97704

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause ...

CVE-2026-109259

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for processing to disclose contents of uninitialized memory from the ImageMagick process...

CVE-2026-109255 FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length

FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in licensecheckstreamlength that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Attackers can send a crafted SERVERLICENSEREQUEST with a large scopeCount that bypasses length checks, causi...

CVE-2026-109255 FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length

FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in licensecheckstreamlength that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Attackers can send a crafted SERVERLICENSEREQUEST with a large scopeCount that bypasses length checks, causi...

CVE-2026-109255

FreeRDP versions 3.0.0 before 3.32.0 are vulnerable to a heap buffer overflow caused by an integer truncation vulnerability in license_check_stream_length. A malicious RDP server can exploit this by sending a crafted SERVER_LICENSE_REQUEST with a large scopeCount, which bypasses existing length c...

EUVD-2026-97699

FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in licensecheckstreamlength that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Attackers can send a crafted SERVERLICENSEREQUEST with a large scopeCount that bypasses length checks, causi...

CVE-2026-109255

FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in licensecheckstreamlength that allows a malicious RDP server to trigger a heap buffer overflow on 32-bit clients. Attackers can send a crafted SERVERLICENSEREQUEST with a large scopeCount that bypasses length checks, causi...

EUVD-2026-97686

FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile-current buffer is allocated without zeroing. A malicious RDP server can send a crafted WBTTILEFIRST then WBTTILEUPGRADE sequence to paint heap bytes onscreen or abort...

CVE-2026-109241

FreeRDP versions before 3.32.0 are vulnerable to a NULL pointer dereference in the client video redirection channel. A malicious server can trigger a denial of service (DoS) by sending out-of-order messages, specifically a Geometry CLEAR message to null presentation->geometry followed by Video...

CVE-2026-109239 Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetch

Crawl4AI before 0.9.4 contains a blind server-side request forgery vulnerability in RobotsParser.canfetch that lets unauthenticated attackers bypass Docker server egress controls. Attackers can enable checkrobotstxt and use redirects or DNS rebinding to reach internal, loopback, or cloud-metadata...

CVE-2026-109239

The Crawl4AI library, in versions prior to 0.9.4 , is susceptible to a blind server-side request forgery (SSRF) vulnerability within the RobotsParser.can_fetch function. This flaw allows unauthenticated attackers to bypass Docker server egress controls by enabling the check_robots_txt feature. At...

EUVD-2026-97683

Crawl4AI before 0.9.4 contains a blind server-side request forgery vulnerability in RobotsParser.canfetch that lets unauthenticated attackers bypass Docker server egress controls. Attackers can enable checkrobotstxt and use redirects or DNS rebinding to reach internal, loopback, or cloud-metadata...