Lucene search
+L

10651 matches found

AstraLinux
AstraLinux
•added 2025/11/01 10:54 a.m.•10 views

Astra Linux – Vulnerability in jpeg-xl

There exists an out-of-bounds read/write in LibJXL versions prior to commit 9cc451b91b74ba470fd72bd48c121e9f33d24c99. The JPEG decoder used by the JPEG XL encoder when performing JPEG recompression i.e., if using JxlEncoderAddJPEGFrame on untrusted input does not properly check bounds in the...

9.8CVSS6.4AI score0.00631EPSS
SaveExploits0References3
osv_oesa
osv_oesa
•added 2025/10/31 11:09 a.m.•19 views

OESA-2025-2614 dav1d security update

dav1d is a new AV1 cross-platform Decoder, open-source, and focused on speed and correctness. Security Fixes: An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading past...

8.8CVSS7AI score0.01835EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/10/31 12:00 a.m.•12 views

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2025:3867-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3867-1 advisory. - CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder bsc1252282. Tenable has extracted the...

7.5CVSS6.7AI score0.00809EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2025/10/30 1:41 p.m.•12 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder bsc1252282. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...

5.7CVSS6.6AI score0.00809EPSS
SaveExploits1References4
osv_suse
osv_suse
•added 2025/10/30 1:41 p.m.•8 views

SUSE-SU-2025:3867-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder bsc1252282...

7.5CVSS6.6AI score0.00809EPSS
SaveExploits1References3
GithubExploit
GithubExploit
•added 2025/10/30 7:21 a.m.•306 views

Exploit for CVE-2025-54957

Dolby Unified Decoder CVE-2025-54957 POC When a file is p...

6.5CVSS7.9AI score0.01595EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2025/10/29 12:00 a.m.•2 views

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2025:3844-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:3844-1 advisory. - CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder bsc1252282. Tenable has...

7.5CVSS6.8AI score0.00809EPSS
SaveExploits1References4
SUSE Linux
SUSE Linux
•added 2025/10/28 4:42 p.m.•15 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder bsc1252282. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...

5.7CVSS6.6AI score0.00809EPSS
SaveExploits1References4
osv_suse
osv_suse
•added 2025/10/28 4:41 p.m.•15 views

SUSE-SU-2025:3844-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder bsc1252282...

7.5CVSS6.6AI score0.00809EPSS
SaveExploits1References3
osv_ghsa
osv_ghsa
•added 2025/10/28 2:43 p.m.•18 views

GHSA-9PP9-CFWX-54RM ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)

Summary CVE-2025-57803 claims to be patched in ImageMagick 7.1.2-2, but the fix is incomplete and ineffective. The latest version 7.1.2-5 remains vulnerable to the same integer overflow attack. The patch added BMPOverflowCheck but placed it after the overflow occurs, making it useless. A maliciou...

4.4CVSS6.8AI score0.00809EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/10/28 2:43 p.m.•21 views

EUVD-2025-34893

ImageMagick has Integer Overflow in BMP Decoder ReadBMP...

7.5CVSS6.6AI score0.00809EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2025/10/28 2:43 p.m.•60 views

ImageMagick has Integer Overflow in BMP Decoder (ReadBMP)

Summary CVE-2025-57803 claims to be patched in ImageMagick 7.1.2-2, but the fix is incomplete and ineffective. The latest version 7.1.2-5 remains vulnerable to the same integer overflow attack. The patch added BMPOverflowCheck but placed it after the overflow occurs, making it useless. A maliciou...

8.8CVSS6.9AI score0.00873EPSS
SaveExploits2References6Affected Software6
Tenable Nessus
Tenable Nessus
•added 2025/10/28 12:00 a.m.•5 views

SUSE SLED15 / SLES15 Security Update : ImageMagick (SUSE-SU-2025:3796-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:3796-1 advisory. - CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder bsc1252282. Tenable has extracted the...

7.5CVSS6.8AI score0.00809EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/10/28 12:00 a.m.•25 views

PT-2026-7614

Name of the Vulnerable Software and Affected Versions libjxl affected versions not specified Description A crafted file can lead to libjxl's decoder reading pixel data from uninitialized memory. This occurs due to an incorrect optimization that causes the decoder to omit populating certain memory...

4.4CVSS6.1AI score0.00167EPSS
SaveExploits0References44
osv_clsa
osv_clsa
•added 2025/10/27 2:39 p.m.•26 views

CLSA-2025-1761575970 Fix of 6 CVEs

SECURITY UPDATE: potential Denial of Service via TLS connection - debian/patches/CVE-2020-14058.patch: Fix sending of unknown validation errors to cert validator - CVE-2020-14058 SECURITY UPDATE: improper Validation of Specified Index leads to Denial of Service via TLS Handshake vulnerability -...

8.6CVSS6.9AI score0.88094EPSS
SaveExploits0References1
osv_suse
osv_suse
•added 2025/10/27 7:58 a.m.•5 views

SUSE-SU-2025:3796-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder bsc1252282...

7.5CVSS6.6AI score0.00809EPSS
SaveExploits1References3
SUSE Linux
SUSE Linux
•added 2025/10/27 7:58 a.m.•23 views

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2025-62171: Fixed incomplete fix for integer overflow in BMP Decoder bsc1252282. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...

5.7CVSS6.6AI score0.00809EPSS
SaveExploits1References4
Tenable Nessus
Tenable Nessus
•added 2025/10/27 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2025-62171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2-7 and 6.9.13-32,...

8.8CVSS6.6AI score0.00873EPSS
SaveExploits2References2
SUSE CVE
SUSE CVE
•added 2025/10/24 11:40 p.m.•17 views

SUSE CVE-2025-23345

NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosure or denial of service...

4.4CVSS5.6AI score0.0016EPSS
SaveExploits0References3
osv_suse
osv_suse
•added 2025/10/24 12:38 p.m.•6 views

SUSE-SU-2025:20900-1 Security update for haproxy

This update for haproxy fixes the following issues: - CVE-2025-11230: Fixed mjson JSON decoder excessive resource consumption bsc1250983...

7.5CVSS7.2AI score0.0069EPSS
SaveExploits0References3
Rows per page
Query Builder