858 matches found
CVE-2026-105825
ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception. Attackers can supply images with malicious XMP profiles to crash applications that proce...
CVE-2026-105402
ImageMagick before 7.1.2-31 contains a denial of service vulnerability that allows attackers to disrupt processing by supplying a crafted XMP profile. Attackers can embed a malicious XMP profile that triggers a failure when determining the numerator and denominator, crashing or hanging image...
CVE-2026-105825 ImageMagick before 7.1.2-30 Denial of Service via Crafted XMP Profile
ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception. Attackers can supply images with malicious XMP profiles to crash applications that proce...
CVE-2026-105825
Versions of ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 are vulnerable to a Denial of Service (DoS) vulnerability. The root cause is improper handling of XMP profiles , where a crafted profile causes the process to terminate instead of raising an exception. An attacker can crash applicat...
EUVD-2026-95012
ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception. Attackers can supply images with malicious XMP profiles to crash applications that proce...
CVE-2026-105402
The software ImageMagick versions prior to 7.1.2-31 is vulnerable to a Denial of Service (DoS) condition during XMP profile parsing . An attacker can provide a crafted XMP profile that causes the application to fail while attempting to determine the numerator and denominator, resulting in a crash...
CVE-2026-105402 ImageMagick before 7.1.2-31 Denial of Service via XMP Profile Parsing
ImageMagick before 7.1.2-31 contains a denial of service vulnerability that allows attackers to disrupt processing by supplying a crafted XMP profile. Attackers can embed a malicious XMP profile that triggers a failure when determining the numerator and denominator, crashing or hanging image...
EUVD-2026-95006
ImageMagick before 7.1.2-31 contains a denial of service vulnerability that allows attackers to disrupt processing by supplying a crafted XMP profile. Attackers can embed a malicious XMP profile that triggers a failure when determining the numerator and denominator, crashing or hanging image...
CVE-2017-9096-iText-XXE
CVE-2017-9096 1. 创建包含 XXE 的恶意 PDF 获取包含表单的 PDF： wget https://www.pdfscripting.com/public/FreeStuff/PDFSamples/ModifySubmitExample.pdf -O input.pdf 解压 PDF 为此，你需要使用 qpdf --qdf --object-streams=disable input.pdf output.pdf 解压 PDF，然后便可以用文本编辑器编辑该 PDF 并添加恶意 XML。 添加外部实体 你可以将 XXE 放入第 77 行的 XMP 元数据中： strea...
PT-2026-107978
ImageMagick before 7.1.2-31 contains a denial of service vulnerability that allows attackers to disrupt processing by supplying a crafted XMP profile. Attackers can embed a malicious XMP profile that triggers a failure when determining the numerator and denominator, crashing or hanging image...
PT-2026-107984
ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception. Attackers can supply images with malicious XMP profiles to crash applications that proce...
CVE-2026-107208
A flaw was found in ImageMagick. When processing a specially crafted Extensible Metadata Platform XMP profile, the software triggers an internal recursion limit that is handled as a fatal condition rather than a standard exception. A remote attacker can exploit this vulnerability by submitting a...
CVE-2026-106576
A flaw was found in ImageMagick. A remote attacker can cause a Denial of Service DoS by submitting an image containing a specially crafted Extensible Metadata Platform XMP profile. When ImageMagick processes the profile, calculating the numerator and denominator of a rational value triggers...
CVE-2026-106568
A flaw was found in ImageMagick. A remote attacker could submit a specially crafted image containing a malformed Extensible Metadata Platform XMP profile, causing the parser to enter an infinite loop during processing. Successful exploitation can result in a Denial of Service DoS by hanging the...
DEBIAN-CVE-2026-107208
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processing process. This...
CVE-2026-107208
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processing process. This...
DEBIAN-CVE-2026-106576
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted XMP profile can trigger excessive work while the parser determines a rational value's numerator and denominator, causing denial of service. This issue is fixed in version...
CVE-2026-106576
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted XMP profile can trigger excessive work while the parser determines a rational value's numerator and denominator, causing denial of service. This issue is fixed in version...
DEBIAN-CVE-2026-106568
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop, preventing image processing from completing. This issue is fixed in...
CVE-2026-106568
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop, preventing image processing from completing. This issue is fixed in...