Lucene search
+L

136 matches found

Tenable Nessus
Tenable Nessus
•added 2026/04/14 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-33899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-189 and 6.9.13-44, when Magick parses an...

5.3CVSS5.7AI score0.00524EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/13 8:46 p.m.•58 views

CVE-2026-33899 ImageMagick: Heap BufferOverflow write of single zero byte when parsing XML

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-189 and 6.9.13-44, when Magick parses an XML file it is possible that a single zero byte is written out of the bounds. This issue has been fixed in versions 6.9.13-44 and 7.1.2-1...

5.3CVSS0.00524EPSS
SaveExploits0References4
OSV
OSV
•added 2026/04/13 8:46 p.m.•18 views

CVE-2026-33899 ImageMagick: Heap BufferOverflow write of single zero byte when parsing XML

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-189 and 6.9.13-44, when Magick parses an XML file it is possible that a single zero byte is written out of the bounds. This issue has been fixed in versions 6.9.13-44 and 7.1.2-1...

5.3CVSS5.9AI score
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/03/28 12:25 a.m.•30 views

SUSE CVE-2026-33535

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, an out-of-bounds write of a zero byte exists in the X11 display interaction path that could lead to a crash. Versions 7.1.2-18 and 6.9.13-43 patch the issue...

4CVSS5.7AI score0.00141EPSS
SaveExploits0References9
CVE
CVE
•added 2026/03/26 7:52 p.m.•104 views

CVE-2026-33535

CVE-2026-33535 affects ImageMagick. The issue is an out-of-bounds write of a zero byte in the X11 display interaction path, leading to a crash. Affected releases include pre-patch versions 7.1.2-17/7.1.2-18? and 6.9.13-42/6.9.13-43 according to sources; the advisory notes that versions 7.1.2-18 a...

5.5CVSS5.7AI score0.00141EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/03/26 7:52 p.m.•66 views

CVE-2026-33535 ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-18 and 6.9.13-43, an out-of-bounds write of a zero byte exists in the X11 display interaction path that could lead to a crash. Versions 7.1.2-18 and 6.9.13-43 patch the issue...

4CVSS0.00141EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2026/03/26 5:17 p.m.•21 views

ImageMagick has an Out-of-Bounds write of a zero byte in its X11 display interaction

An out-of-bounds write of a zero byte exists in the X11 display interaction path that could lead to a crash...

5.5CVSS5.9AI score0.00141EPSS
SaveExploits0References3Affected Software18
Snyk
Snyk
•added 2026/03/26 5:17 p.m.•20 views

Out-of-bounds Write

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.5CVSS5.6AI score0.00141EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/03/26 9:17 a.m.•16 views

CVE-2026-34085

A flaw was found in fontconfig. This vulnerability, an off-by-one error in how fontconfig handles font capabilities, could allow a local attacker to cause a one-byte out-of-bounds write. This issue may lead to a system crash, resulting in a Denial of Service DoS, or potentially enable the attacke...

7.8CVSS6.1AI score0.00182EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2026/03/26 12:24 a.m.•16 views

SUSE CVE-2026-34085

fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution. This is in FcFontCapabilities in fcfreetype.c...

7.8CVSS6.2AI score0.00182EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/03/25 6:38 p.m.•12 views

Off-by-one Error

Overview Affected versions of this package are vulnerable to Off-by-one Error via the FcFontCapabilities function in fcfreetype.c. An attacker can cause a one-byte out-of-bounds write, potentially leading to a crash or execution of arbitrary code by supplying crafted input that triggers the...

7.8CVSS6.2AI score0.00182EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/25 6:31 p.m.•23 views

EUVD-2026-15934

fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution. This is in FcFontCapabilities in fcfreetype.c...

5.9CVSS6.2AI score0.00182EPSS
SaveExploits0References4
CVE
CVE
•added 2026/03/25 4:54 p.m.•46 views

CVE-2026-34085

CVE-2026-34085 affects fontconfig before 2.17.1. The vulnerability is an off-by-one error in allocation during sfnt capability handling, causing a one-byte out-of-bounds write in FcFontCapabilities within fcfreetype.c. Consequences include potential crash or code execution. The available connecte...

7.8CVSS6.2AI score0.00182EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/03/25 4:54 p.m.•45 views

CVE-2026-34085

fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution. This is in FcFontCapabilities in fcfreetype.c...

5.9CVSS0.00182EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/03/25 4:54 p.m.•23 views

CVE-2026-34085

fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution. This is in FcFontCapabilities in fcfreetype.c...

7.8CVSS6.2AI score0.00182EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2026/03/25 4:54 p.m.•29 views

CVE-2026-34085

fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or code execution. This is in FcFontCapabilities in fcfreetype.c...

7.8CVSS6.2AI score0.00182EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•23 views

fontconfig 安全漏洞

Fontconfig is an open-source font-related computer library developed by freedesktop. Versions of Fontconfig prior to 2.17.1 contained security vulnerabilities. These vulnerabilities stemmed from errors in the allocation process during sfnt processing, which could lead to one-byte out-of-bound...

7.8CVSS6.2AI score0.00182EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/03/17 5:12 p.m.•21 views

Out-of-bounds Write

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS5.8AI score0.00609EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•22 views

Use After Free

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS6AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/02/25 7:12 p.m.•22 views

mageMagick has a possible use-after-free write in its PDB decoder

A use-after-free vulnerability exists in the PDB decoder that will use a stale pointer when a memory allocation fails and that could result in a crash or a single zero byte write. ==4033155==ERROR: AddressSanitizer: UNKNOWN SIGNAL on unknown address 0x000000000000 pc 0x5589c1971b24 bp...

5.4AI score
SaveExploits0References4Affected Software19
Rows per page
Query Builder