Lucene search
+L

10672 matches found

EUVD
EUVD
•added 2026/02/26 10:20 p.m.•26 views

EUVD-2026-8792

MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity...

7CVSS8AI score0.00467EPSS
SaveExploits0References3
OSS-Fuzz
OSS-Fuzz
•added 2026/02/26 10:09 a.m.•12 views

ffmpeg:ffmpeg_AV_CODEC_ID_MAGICYUV_DEC_fuzzer: Heap-buffer-overflow in magy_decode_slice

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4683933221715968 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDMAGICYUVDECfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type:...

5.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/02/26 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-25970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a signed integer overfl...

7.5CVSS6.9AI score0.00494EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•17 views

Improper Encoding or Escaping of Output

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.9CVSS6.2AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/02/25 7:12 p.m.•111 views

ImageMagick: SVG-to-MVG Command Injection via coders/svg.c

An attacker can inject arbitrary MVG Magick Vector Graphics drawing commands in an SVG file that is read by the internal SVG decoder of ImageMagick. The injected MVG commands execute during rendering...

9.2CVSS7.6AI score0.01643EPSS
SaveExploits0References10Affected Software19
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•9 views

Improper Encoding or Escaping of Output

Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the internal SVG decoder process. An attacker can execute arbitrary MVG drawing commands by crafting a malicious SVG file that is processed by the application. Remediation A fix was pushed int...

9.2CVSS7.6AI score0.01643EPSS
SaveExploits0References3
osv_ghsa
osv_ghsa
•added 2026/02/25 7:12 p.m.•11 views

GHSA-XPG8-7M6M-JF56 ImageMagick: SVG-to-MVG Command Injection via coders/svg.c

An attacker can inject arbitrary MVG Magick Vector Graphics drawing commands in an SVG file that is read by the internal SVG decoder of ImageMagick. The injected MVG commands execute during rendering...

7.6AI score0.01643EPSS
SaveExploits0References10
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•17 views

Improper Encoding or Escaping of Output

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.9CVSS6.2AI score
SaveExploits0References3
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•12 views

Use After Free

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

6.3CVSS6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•13 views

Use After Free

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.3CVSS6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•13 views

Use After Free

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•11 views

Use After Free

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•20 views

Use After Free

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•25 views

Use After Free

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•17 views

Use After Free

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.3CVSS6AI score
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/02/25 7:12 p.m.•22 views

mageMagick has a possible use-after-free write in its PDB decoder

A use-after-free vulnerability exists in the PDB decoder that will use a stale pointer when a memory allocation fails and that could result in a crash or a single zero byte write. ==4033155==ERROR: AddressSanitizer: UNKNOWN SIGNAL on unknown address 0x000000000000 pc 0x5589c1971b24 bp...

5.4AI score
SaveExploits0References4Affected Software19
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•19 views

Use After Free

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.3CVSS6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•14 views

Use After Free

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

6.3CVSS6AI score
SaveExploits0References2
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•12 views

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the PDB decoder when a memory allocation fails, leading to the use of a stale pointer. An attacker can cause a crash or trigger a single zero byte write by providing specially crafted input files. Remediation A fix was...

6.3CVSS5.9AI score0.00231EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/25 7:12 p.m.•14 views

Use After Free

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.3CVSS6AI score
SaveExploits0References2
Rows per page
Query Builder