Lucene search
K

2518 matches found

Snyk
Snyk
added 2025/08/13 2:0 p.m.3 views

Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.1CVSS6.3AI score0.00383EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/13 2:0 p.m.1 views

Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

6.1CVSS6.3AI score0.00383EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/13 2:0 p.m.2 views

Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.1CVSS6.3AI score0.00383EPSS
Exploits1References2
Snyk
Snyk
added 2025/08/13 2:0 p.m.1 views

Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

Overview Affected versions of this package are vulnerable to Reliance on Undefined, Unspecified, or Implementation-Defined Behavior due to undefined behavior in the cloneimage operations when handling image data. An attacker can cause unintended modifications to files or partial denial of service...

6.1CVSS6.6AI score0.00383EPSS
Exploits1References2
CVE
CVE
added 2025/08/13 2:0 p.m.55 views

CVE-2025-55160

ImageMagick has a defined vulnerability CVE-2025-55160 due to an undefined behavior (function-type-mismatch) in splay tree cloning callback, leading to a deterministic abort under UBSan in sanitizer builds. The issue affects versions older than 6.9.13-27 and 7.1.2-1 and has been patched in 6.9.13...

6.1CVSS7AI score0.00383EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2025/08/13 2:0 p.m.2 views

CVE-2025-55160

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior function-type-mismatch in splay tree cloning callback. This results in a deterministic abort under UBSan DoS in sanitizer builds, wit...

6.1CVSS6AI score0.00383EPSS
Exploits1
Snyk
Snyk
added 2025/08/13 2:0 p.m.3 views

Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.1CVSS6.3AI score0.00383EPSS
Exploits1References2
Cvelist
Cvelist
added 2025/08/13 2:0 p.m.6 views

CVE-2025-55160 ImageMagick Undefined Behavior (function-type-mismatch) in CloneSplayTree

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior function-type-mismatch in splay tree cloning callback. This results in a deterministic abort under UBSan DoS in sanitizer builds, wit...

6.1CVSS0.00383EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/08/13 2:0 p.m.2 views

CVE-2025-55160 ImageMagick Undefined Behavior (function-type-mismatch) in CloneSplayTree

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior function-type-mismatch in splay tree cloning callback. This results in a deterministic abort under UBSan DoS in sanitizer builds, wit...

6.1CVSS7AI score0.00383EPSS
Exploits1References1
Snyk
Snyk
added 2025/08/13 2:0 p.m.5 views

Reliance on Undefined, Unspecified, or Implementation-Defined Behavior

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.1CVSS6.3AI score0.00383EPSS
Exploits1References2
AlpineLinux
AlpineLinux
added 2025/08/13 2:0 p.m.3 views

CVE-2025-55160

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior function-type-mismatch in splay tree cloning callback. This results in a deterministic abort under UBSan DoS in sanitizer builds, wit...

6.1CVSS7.1AI score0.00383EPSS
Exploits1References1
RedHat Linux
RedHat Linux
added 2025/08/13 9:46 a.m.5 views

angle: insufficient input validation can cause undefined behavior

A flaw was found in the libANGLE library. An improper input validation can cause undefined behavior when a specially crafted webpage is visited, potentially resulting in code execution...

8.8CVSS7.2AI score0.09524EPSS
Exploits0References8
RedHat Linux
RedHat Linux
added 2025/08/13 9:40 a.m.6 views

angle: insufficient input validation can cause undefined behavior

A flaw was found in the libANGLE library. An improper input validation can cause undefined behavior when a specially crafted webpage is visited, potentially resulting in code execution...

8.8CVSS7.2AI score0.09524EPSS
Exploits0References8
CNNVD
CNNVD
added 2025/08/13 12:0 a.m.1 views

ImageMagick 安全漏洞

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert or write images in many formats. A security vulnerability exists in ImageMagick versions prior to 6.9.13-27 and 7.1.2-1, which stems from undefined behavior in the splay tree clone...

6.1CVSS6.1AI score0.00383EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2024-47763

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash...

5.5CVSS5.4AI score0.00244EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-1556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only...

6.5CVSS7.5AI score0.00474EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/12 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-22067

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: spi: cadence: Fix out-of-bounds array access in cdnsmrvlxspisetupclock If requestedclk 128,...

7.8CVSS6.4AI score0.00174EPSS
Exploits0References2
OSV
OSV
added 2025/08/11 11:15 p.m.2 views

UBUNTU-CVE-2025-55159

slab is a pre-allocated storage for a uniform data type. In version 0.4.10, the getdisjointmut method incorrectly checked if indices were within the slab's capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes. This has...

5.1CVSS5.7AI score0.00156EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2025/08/11 11:0 p.m.3 views

CVE-2025-55159

slab is a pre-allocated storage for a uniform data type. In version 0.4.10, the getdisjointmut method incorrectly checked if indices were within the slab's capacity instead of its length, allowing access to uninitialized memory. This could lead to undefined behavior or potential crashes. This has...

5.1CVSS5.3AI score0.00156EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-27069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ovl: relax WARNON in ovlverifyarea syzbot hit an assertion in copy up data loop which looks...

5.5CVSS5.8AI score0.00193EPSS
Exploits0References2
Rows per page
Query Builder