Lucene search
+L

56 matches found

Snyk
Snyk
•added 2026/02/25 7:24 p.m.•20 views

Buffer Over-read

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS6AI score0.00204EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/02/25 7:24 p.m.•11 views

Buffer Over-read

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS6AI score0.00204EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/02/25 7:24 p.m.•10 views

ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images

A heap buffer over-read vulnerability occurs when processing an image with small dimension using the -wavelet-denoise operator. ==3693336==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x511000001280 at pc 0x5602c8b0cc75 bp 0x7ffcb105d510 sp 0x7ffcb105d500 READ of size 4 at...

7.1CVSS5.6AI score0.00204EPSS
SaveExploits0References5Affected Software19
Snyk
Snyk
•added 2026/02/25 7:24 p.m.•13 views

Buffer Over-read

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS6AI score0.00204EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/02/25 7:24 p.m.•14 views

Buffer Over-read

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.1CVSS6AI score0.00204EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/02/25 7:24 p.m.•14 views

Buffer Over-read

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.1CVSS6AI score0.00204EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/02/25 7:24 p.m.•7 views

Buffer Over-read

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

7.1CVSS6AI score0.00204EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/02/25 7:24 p.m.•3 views

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read in the WaveletDenoise process when handling images with small dimensions. An attacker can access sensitive information from adjacent memory by submitting specially crafted image files. Remediation A fix was pushed into...

7.1CVSS5.9AI score0.00204EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/02/25 7:24 p.m.•8 views

EUVD-2026-8771

ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images...

4CVSS5.3AI score0.00204EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/02/25 12:00 a.m.•7 views

PT-2026-22046

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. A heap buffer over-read issue arises when processing an image with small...

7.1CVSS5.5AI score0.00204EPSS
SaveExploits0References116
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2021-2217

Malware in sbrugna...

6.5CVSS5.6AI score0.01756EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
•added 2023/08/02 9:30 p.m.•61 views

Golang TIFF decoder does not place a limit on the size of compressed tile data

The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image both in terms of pixel width/height, and encoded size to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU...

6.5CVSS7AI score0.00933EPSS
SaveExploits0References9Affected Software1
OSV
OSV
•added 2023/08/02 8:15 p.m.•22 views

UBUNTU-CVE-2023-29408

The TIFF decoder does not place a limit on the size of compressed tile data. A maliciously-crafted image can exploit this to cause a small image both in terms of pixel width/height, and encoded size to make the decoder decode large amounts of compressed data, consuming excessive memory and CPU...

6.5CVSS5.8AI score0.00933EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2023/02/15 4:05 a.m.•9 views

SUSE CVE-2019-19624

An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsestscale is assumed to be greater than or equal to finestscale within the calc/oclcalc functions in disflow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of t...

6.5CVSS6.5AI score0.01756EPSS
SaveExploits1References3
OSV
OSV
•added 2019/12/06 3:15 p.m.•8 views

DEBIAN-CVE-2019-19624

An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsestscale is assumed to be greater than or equal to finestscale within the calc/oclcalc functions in disflow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of t...

6.5CVSS6.2AI score0.01756EPSS
SaveExploits1References1
Metasploit
Metasploit
•added 2009/11/24 12:00 a.m.•34 views

OpenX banner-edit.php File Upload PHP Code Execution

This module exploits a vulnerability in the OpenX advertising software. In versions prior to version 2.8.2, authenticated users can upload files with arbitrary extensions to be used as banner creative content. By uploading a file with a PHP extension, an attacker can execute arbitrary PHP code...

6CVSS6.2AI score0.18676EPSS
SaveExploits3
Rows per page
Query Builder