Lucene search
+L

79 matches found

EUVD
EUVD
added 2026/07/11 1:1 p.m.13 views

EUVD-2026-43189

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service...

2.9CVSS6.1AI score0.00191EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/11 1:1 p.m.7 views

CVE-2026-61870

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service...

2.9CVSS6.1AI score0.00191EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/11 1:1 p.m.8 views

CVE-2026-61870 ImageMagick before 7.1.2-26 Memory Leak via VIFF Encoder

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service...

2.1CVSS6.1AI score0.00191EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/07/11 1:1 p.m.5 views

CVE-2026-61870 ImageMagick before 7.1.2-26 Memory Leak via VIFF Encoder

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service...

2.9CVSS6.1AI score0.00191EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/11 1:1 p.m.48 views

CVE-2026-61870 ImageMagick before 7.1.2-26 Memory Leak via VIFF Encoder

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service...

2.9CVSS0.00191EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2026/07/11 1:1 p.m.11 views

CVE-2026-61870

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the VIFF encoder when memory allocation fails. Attackers can trigger allocation failures by processing specially crafted VIFF images to exhaust available memory and cause denial of service...

7.5CVSS6.1AI score0.00191EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/11 12:0 a.m.15 views

PT-2026-57447

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-26 Description A memory leak exists in the VIFF encoder that occurs when memory allocation fails. An attacker can cause a denial of service by processing specially crafted VIFF images to exhaust available...

9.1CVSS6.1AI score0.00323EPSS
SaveExploits0References76
SUSE Linux
SUSE Linux
added 2026/06/23 1:25 p.m.10 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues This update for ImageMagick fixes the following issues CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing bsc1262154. CVE-2026-33900: Denial of Service via integer truncation in viff encoder bsc1262156. CVE-2026-33901:...

8.7CVSS6.1AI score0.01849EPSS
SaveExploits4References116
OSV
OSV
added 2026/06/23 1:25 p.m.5 views

SUSE-SU-2026:2580-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues This update for ImageMagick fixes the following issues - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing bsc1262154. - CVE-2026-33900: Denial of Service via integer truncation in viff encoder bsc1262156. -...

7.5CVSS6.1AI score0.01849EPSS
SaveExploits4References59
OSV
OSV
added 2026/04/28 4:55 p.m.14 views

CLSA-2026-1777395318 ImageMagick: Fix of 2 CVEs

CVE-2026-33900: integer truncation/wraparound in the viff encoder that could trigger an out-of-bounds heap write on 32-bit builds GHSA-v67w-737x-v2c9; upstream b6c01a5a23f1e350ebe2db78c7cc326db2e320c9 - CVE-2026-33905: out-of-bounds read in SampleImage when sample:offset is set via -sample define...

7.5CVSS5.8AI score0.00434EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/28 4:50 p.m.14 views

CLSA-2026-1777395036 ImageMagick: Fix of 2 CVEs

CVE-2026-33900: integer truncation/wraparound in the viff encoder that could trigger an out-of-bounds heap write on 32-bit builds GHSA-v67w-737x-v2c9; upstream b6c01a5a23f1e350ebe2db78c7cc326db2e320c9 - CVE-2026-33905: out-of-bounds read in SampleImage when sample:offset is set via -sample define...

7.5CVSS5.8AI score0.00434EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/28 4:38 p.m.10 views

CLSA-2026-1777394326 ImageMagick: Fix of 2 CVEs

CVE-2026-33900: integer truncation/wraparound in the viff encoder that could trigger an out-of-bounds heap write on 32-bit builds GHSA-v67w-737x-v2c9; upstream b6c01a5a23f1e350ebe2db78c7cc326db2e320c9 - CVE-2026-33905: out-of-bounds read in SampleImage when sample:offset is set via -sample define...

7.5CVSS5.8AI score0.00434EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/27 8:55 p.m.8 views

CLSA-2026-1777323301 Fix CVE(s): CVE-2026-33900, CVE-2026-33905

SECURITY UPDATE: out-of-bounds heap write in VIFF encoder due to integer truncation on 32-bit builds - debian/patches/CVE-2026-33900.patch: add overflow check in WriteVIFFImage to reject packets values that truncate when cast to sizet, preventing a heap write beyond the allocated buffer -...

7.5CVSS5.9AI score0.00434EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/25 12:0 a.m.8 views

SUSE SLES12 Security Update : ImageMagick (SUSE-SU-2026:1596-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1596-1 advisory. - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing bsc1262154. - CVE-2026-33900: Denial of Service via integer truncati...

7.5CVSS5.6AI score0.0051EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus
added 2026/04/25 12:0 a.m.7 views

SUSE SLES15 Security Update : ImageMagick (SUSE-SU-2026:1597-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1597-1 advisory. - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing bsc1262154. - CVE-2026-33900: Denial of Service via...

7.5CVSS5.9AI score0.00566EPSS
SaveExploits0References34
OSV
OSV
added 2026/04/24 10:42 p.m.11 views

CLSA-2026-1777070517 Fix CVE(s): CVE-2026-33900, CVE-2026-33905

SECURITY UPDATE: integer truncation in VIFF encoder leading to out-of-bounds heap write - debian/patches/CVE-2026-33900.patch: add truncation check before AcquireVirtualMemory call in WriteVIFFImage in coders/viff.c - CVE-2026-33900 SECURITY UPDATE: out-of-bounds read in SampleImage via...

7.5CVSS5.8AI score0.00434EPSS
SaveExploits0References1
OSV
OSV
added 2026/04/24 11:44 a.m.7 views

SUSE-SU-2026:1598-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing bsc1262154. - CVE-2026-33900: Denial of Service via integer truncation in viff encoder bsc1262156. - CVE-2026-33901: Denial of Service due to heap buffer overflow in...

7.5CVSS5.9AI score0.00566EPSS
SaveExploits0References25
SUSE Linux
SUSE Linux
added 2026/04/24 11:44 a.m.4 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing bsc1262154. CVE-2026-33900: Denial of Service via integer truncation in viff encoder bsc1262156. CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG...

8.7CVSS5.7AI score0.00566EPSS
SaveExploits0References44
OSV
OSV
added 2026/04/24 11:44 a.m.4 views

SUSE-SU-2026:1597-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing bsc1262154. - CVE-2026-33900: Denial of Service via integer truncation in viff encoder bsc1262156. - CVE-2026-33901: Denial of Service due to heap buffer overflow in...

7.5CVSS5.8AI score0.00566EPSS
SaveExploits0References23
OSV
OSV
added 2026/04/22 11:23 a.m.5 views

SUSE-SU-2026:21380-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-32259: stack out-of-bounds write due to a memory allocation failure in the sixel encoder can lead to a crash bsc1259612. - CVE-2026-32636: out-of-bounds write of a single zero byte due to bug the NewXMLTree method can lead to deni...

7.5CVSS6.2AI score0.00566EPSS
SaveExploits0References33
Rows per page
Query Builder