Lucene search
K

20 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there was undefined behavior function-type-mismatch in splay tree cloning callbacks. This caused a deterministic abort under UBSan DoS in sanitizer builds, with ...

6.1CVSS5.7AI score0.0007EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2026/04/29 12:0 a.m.4 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-015470)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-015470 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior...

6.1CVSS6.1AI score0.0007EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-24566

Malicious code in bioql PyPI...

6.1CVSS6.2AI score0.0007EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2025/09/22 12:0 a.m.1 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : ImageMagick vulnerabilities (USN-7756-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7756-1 advisory. It was discovered that ImageMagick did not properly handle memory when performing magnified...

9.8CVSS7.3AI score0.00392EPSS
Exploits4References5
Ubuntu
Ubuntu
added 2025/09/18 10:44 a.m.3 views

USN-7756-1: ImageMagick vulnerabilities

It was discovered that ImageMagick did not properly handle memory when performing magnified size calculations. An attacker could possibly use this issue to cause ImageMagick to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2025-55154 Woojin Park, Hojun Lee,...

9.8CVSS7.3AI score0.00392EPSS
Exploits4
Veracode
Veracode
added 2025/09/18 7:45 a.m.5 views

Denial Of Service (DoS)

ImageMagick is vulnerable to Denial of Service DoS. The vulnerability is due to a function-type-mismatch in the splay tree cloning callback, which allows an attacker to trigger a deterministic abort under UBSan, leading to service disruption in sanitizer builds...

6.1CVSS6.8AI score0.0007EPSS
Exploits1References4Affected Software18
OSV
OSV
added 2025/09/10 6:1 p.m.1 views

SUSE-SU-2025:03151-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-55004: Fixed heap buffer over-read in in ReadOneMNGIMage when processing images with separate alpha channels bsc1248076. - CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces bsc1248077. -...

8.8CVSS7.1AI score0.01005EPSS
Exploits7References15
OSV
OSV
added 2025/09/05 12:43 p.m.1 views

OESA-2025-2196 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

8.8CVSS6.7AI score0.01005EPSS
Exploits7References8
Tenable Nessus
Tenable Nessus
added 2025/08/31 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-55160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined...

6.1CVSS5.2AI score0.0007EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2025/08/25 4:23 p.m.3 views

ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree

Summary - Target: ImageMagick commit ecc9a5eb456747374bae8e07038ba10b3d8821b3 - Type: Undefined Behavior function-type-mismatch in splay tree cloning callback - Impact: Deterministic abort under UBSan DoS in sanitizer builds. No crash in a non-sanitized build; likely low security impact. - Trigge...

6.1CVSS7AI score0.0007EPSS
Exploits1References4Affected Software18
OSV
OSV
added 2025/08/25 4:23 p.m.1 views

GHSA-6HGW-6X87-578X ImageMagick has Undefined Behavior (function-type-mismatch) in CloneSplayTree

Summary - Target: ImageMagick commit ecc9a5eb456747374bae8e07038ba10b3d8821b3 - Type: Undefined Behavior function-type-mismatch in splay tree cloning callback - Impact: Deterministic abort under UBSan DoS in sanitizer builds. No crash in a non-sanitized build; likely low security impact. - Trigge...

6.1CVSS7AI score0.0007EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2025/08/14 2:53 a.m.1 views

SUSE CVE-2025-55160

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior function-type-mismatch in splay tree cloning callback. This results in a deterministic abort under UBSan DoS in sanitizer builds, wit...

5.8CVSS6.7AI score0.0007EPSS
Exploits1References8
NVD
NVD
added 2025/08/13 2:15 p.m.1 views

CVE-2025-55160

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior function-type-mismatch in splay tree cloning callback. This results in a deterministic abort under UBSan DoS in sanitizer builds, wit...

6.1CVSS0.0007EPSS
Exploits1References1
OSV
OSV
added 2025/08/13 2:15 p.m.1 views

DEBIAN-CVE-2025-55160

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior function-type-mismatch in splay tree cloning callback. This results in a deterministic abort under UBSan DoS in sanitizer builds, wit...

5.3CVSS6AI score0.0007EPSS
Exploits1References1
OSV
OSV
added 2025/08/13 2:15 p.m.0 views

UBUNTU-CVE-2025-55160

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior function-type-mismatch in splay tree cloning callback. This results in a deterministic abort under UBSan DoS in sanitizer builds, wit...

6.1CVSS5.7AI score0.0007EPSS
Exploits1References4
CVE
CVE
added 2025/08/13 2:0 p.m.40 views

CVE-2025-55160

ImageMagick has a defined vulnerability CVE-2025-55160 due to an undefined behavior (function-type-mismatch) in splay tree cloning callback, leading to a deterministic abort under UBSan in sanitizer builds. The issue affects versions older than 6.9.13-27 and 7.1.2-1 and has been patched in 6.9.13...

6.1CVSS7AI score0.0007EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2025/08/13 2:0 p.m.1 views

CVE-2025-55160 ImageMagick Undefined Behavior (function-type-mismatch) in CloneSplayTree

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior function-type-mismatch in splay tree cloning callback. This results in a deterministic abort under UBSan DoS in sanitizer builds, wit...

6.1CVSS6.2AI score0.0007EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/08/13 2:0 p.m.1 views

CVE-2025-55160 ImageMagick Undefined Behavior (function-type-mismatch) in CloneSplayTree

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior function-type-mismatch in splay tree cloning callback. This results in a deterministic abort under UBSan DoS in sanitizer builds, wit...

6.1CVSS7AI score0.0007EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2025/08/13 2:0 p.m.1 views

CVE-2025-55160

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior function-type-mismatch in splay tree cloning callback. This results in a deterministic abort under UBSan DoS in sanitizer builds, wit...

6.1CVSS7.1AI score0.0007EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/07/08 12:0 a.m.2 views

PT-2025-32998

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.13-27 ImageMagick versions prior to 7.1.2-1 Description: ImageMagick is a free and open-source software suite for editing and manipulating digital images. A function-type-mismatch exists in the splay tree...

8.8CVSS6.8AI score0.00089EPSS
Exploits4References78
Rows per page
Query Builder