3584 matches found
gimp: GIMP: Remote Code Execution via uninitialized memory in PGM file parsing
A flaw was found in GIMP. This uninitialized memory vulnerability allows a remote attacker to execute arbitrary code on affected installations. Successful exploitation requires user interaction, where the target must open a specially crafted PGM Portable Graymap image file. This can lead to...
gimp: GIMP: Remote Code Execution via uninitialized memory in PGM file parsing
A flaw was found in GIMP. This uninitialized memory vulnerability allows a remote attacker to execute arbitrary code on affected installations. Successful exploitation requires user interaction, where the target must open a specially crafted PGM Portable Graymap image file. This can lead to...
CVE-2026-30007
XnSoft NConvert 7.230 is affected by CVE-2026-30007: a Use-After-Free in processing crafted TIFF files. According to the provided metrics, the impact is Availability: High; Confidentiality/Integrity: None; Attack vector: Local; Privileges required: None; User interaction: None; Base score 6.2 (Me...
CVE-2026-30006
XnSoft NConvert 7.230 is affected by a vulnerability described as a Stack Buffer Overrun triggered by a crafted TIFF file. The issue relates to parsing TIFF data and can impact availability. The provided documents identify the affected product and the file type but do not disclose the exact root-...
gimp: GIMP: Remote Code Execution via uninitialized memory in PGM file parsing
A flaw was found in GIMP. This uninitialized memory vulnerability allows a remote attacker to execute arbitrary code on affected installations. Successful exploitation requires user interaction, where the target must open a specially crafted PGM Portable Graymap image file. This can lead to...
ImageMagick integer overflow vulnerability (CNVD-2026-16600)
ImageMagick is ImageMagick open source set of open source image processing software. Can read, convert or write images in a variety of formats. ImageMagick suffers from an integer overflow vulnerability that can be exploited by an attacker to perform out-of-bounds operations via a specially craft...
EUVD-2026-10401
ImageMagick has Heap Buffer Overflow in WaveletDenoiseImage...
EUVD-2026-10371
ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder...
ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder
An integer overflow vulnerability exists in the SIXEL decoer. The vulnerability allows an attacker to perform an out of bounds via a specially crafted mage...
GHSA-R39Q-JR8H-GCQ2 ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder
An integer overflow vulnerability exists in the SIXEL decoer. The vulnerability allows an attacker to perform an out of bounds via a specially crafted mage...
SUSE CVE-2026-30935
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, BilateralBlurImage contains a heap buffer over-read caused by an incorrect conversion. When processing a crafted image with the -bilateral-blur operation an out of bounds rea...
SUSE CVE-2026-28493
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, an integer overflow vulnerability exists in the SIXEL decoer. The vulnerability allows an attacker to perform an out of bounds via a specially crafted image. This vulnerabili...
SUSE CVE-2026-30936
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a crafted image could cause an out of bounds heap write inside the WaveletDenoiseImage method. When processing a crafted image with the -wavelet-denoise operati...
EUVD-2026-10740
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CTiffImg::ReadLine when iccApplyProfiles processes a crafted TIFF image, causing memory disclosure or crash. This vulnerability is fixed in 2.3.1.5...
CVE-2026-31797 iccDEV has a heap out-of-bounds read in CTiffImg::ReadLine()
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap out-of-bounds read in CTiffImg::ReadLine when iccApplyProfiles processes a crafted TIFF image, causing memory disclosure or crash. This vulnerability is fixed in 2.3.1.5...
gimp: GIMP: Remote Code Execution via uninitialized memory in PGM file parsing
A flaw was found in GIMP. This uninitialized memory vulnerability allows a remote attacker to execute arbitrary code on affected installations. Successful exploitation requires user interaction, where the target must open a specially crafted PGM Portable Graymap image file. This can lead to...
DEBIAN-CVE-2026-30935
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16, BilateralBlurImage contains a heap buffer over-read caused by an incorrect conversion. When processing a crafted image with the -bilateral-blur operation an out of bounds rea...
CVE-2026-30936
A flaw was found in ImageMagick, a free and open-source software for editing and manipulating digital images. A remote attacker could exploit this vulnerability by providing a specially crafted image to a user, which, when processed with the -wavelet-denoise operation, could lead to an...
ImageMagick 输入验证错误漏洞
ImageMagick is ImageMagick open source set of open source image processing software. Can read, convert or write images in a variety of formats. ImageMagick suffers from an integer overflow vulnerability that can be exploited by an attacker to perform out-of-bounds operations via a specially craft...
CVE-2026-30936 ImageMagick has a heap Buffer Overflow in WaveletDenoiseImage
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a crafted image could cause an out of bounds heap write inside the WaveletDenoiseImage method. When processing a crafted image with the -wavelet-denoise operati...