3 matches found
EUVD-2025-204295
due to insufficient sanitazation in Vega’s convert function when safeMode is enabled and the spec variable is an array. An attacker can craft a malicious Vega diagram specification that will allow them to send requests to any URL, including local file system paths, leading to exposure of sensitiv...
8.7CVSS6AI score0.00284EPSS
SaveExploits0References2
Vulnerability fixed in ImageMagick
A malicious party could potentially exploit the vulnerability to execute arbitrary code under a user's privileges, when using the "convert" program to convert a specially prepared file to convert it to a PDF file. ImageMagick has released updates to fix the vulnerability. fix. For more informatio...
7.8CVSS7.3AI score0.07508EPSS
SaveExploits1
20