Lucene search
+L

300 matches found

Snyk
Snyk
•added 2026/01/20 1:01 a.m.•20 views

Integer Overflow or Wraparound

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS7.3AI score0.00678EPSS
SaveExploits1References3
Snyk
Snyk
•added 2026/01/20 1:01 a.m.•17 views

Integer Overflow or Wraparound

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

9.8CVSS7.3AI score0.00678EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2026/01/20 1:01 a.m.•18 views

CVE-2026-23876

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder ReadXBMImage allows an attacker to write controlled data past the allocated heap buffer when...

9.8CVSS7.4AI score0.00678EPSS
SaveExploits1
Mend
Mend
•added 2026/01/20 1:01 a.m.•3 views

CVE-2026-23876

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder ReadXBMImage allows an attacker to write controlled data past the allocated heap buffer when...

9.8CVSS7.4AI score0.00678EPSS
SaveExploits1References8
AlpineLinux
AlpineLinux
•added 2026/01/20 1:01 a.m.•12 views

CVE-2026-23876

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder ReadXBMImage allows an attacker to write controlled data past the allocated heap buffer when...

9.8CVSS7.4AI score0.00678EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/20 12:00 a.m.•8 views

CVE-2026-23876: Heap-based Buffer Overflow

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow vulnerability in the XBM image decoder ReadXBMImage allows an attacker to write controlled data past the allocated heap buffer when...

9.8CVSS7.4AI score0.00678EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2026/01/20 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-23876

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-13 and 6.9.13-38, a heap buffer overflow...

9.8CVSS7.3AI score0.00678EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/01/18 12:00 a.m.•18 views

PT-2026-3528

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-13 and 6.9.13-38 Description ImageMagick is a free and open-source software used for editing and manipulating digital images. A heap buffer overflow vulnerability exists in the XBM image decoder ReadXBMImage...

9.8CVSS7.8AI score0.00678EPSS
SaveExploits1References144
SUSE CVE
SUSE CVE
•added 2026/01/07 12:25 a.m.•11 views

SUSE CVE-2025-15278

FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS7.9AI score0.00296EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/01/01 10:45 a.m.•20 views

CVE-2025-15278

A flaw was found in FontForge. This integer overflow vulnerability, located in the parsing of pixels within XBM X BitMap files, allows a remote attacker to execute arbitrary code. The issue arises from insufficient validation of user-supplied data, which can lead to an integer overflow before...

7.8CVSS7.9AI score0.00296EPSS
SaveExploits0References4
NVD
NVD
•added 2025/12/31 7:15 a.m.•20 views

CVE-2025-15278

FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS0.00296EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2025/12/31 7:15 a.m.•14 views

CVE-2025-15278

FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS7.4AI score0.00296EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2025/12/31 7:15 a.m.•25 views

UBUNTU-CVE-2025-15278

FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS6.2AI score0.00296EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/12/31 6:59 a.m.•6 views

CVE-2025-15278 FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability

FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS7.9AI score0.00296EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/12/31 6:59 a.m.•22 views

CVE-2025-15278 FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability

FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS7.6AI score
SaveExploits0References3
EUVD
EUVD
•added 2025/12/31 6:59 a.m.•17 views

EUVD-2025-205888

FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS7.2AI score0.00296EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/12/31 6:59 a.m.•19 views

CVE-2025-15278

FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS7.9AI score0.00296EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2025/12/31 6:59 a.m.•17 views

CVE-2025-15278

FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious...

7.8CVSS7.9AI score0.00296EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/12/31 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2025-15278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

7.8CVSS7.9AI score0.00296EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•16 views

FontForge 输入验证错误漏洞

FontForge is an open source font editing tool from fontforge open source that supports multiple languages. An input validation error vulnerability exists in FontForge that stems from improper validation of data when parsing XBM file pixels, which could lead to an integer overflow and remote code...

7.8CVSS8AI score0.00296EPSS
SaveExploits0References1
Rows per page
Query Builder