CVE-2026-25638

ImageMagick (IM) is affected by a memory leak in the msl encoder code path. Specifically, in coders/msl.c, resources allocated in the WriteMSLImage function are not released when the function returns early, leading to a leak. This affects IM versions prior to 7.1.2-15 and 6.9.13-40. A patch addre...

Quadratic complexity when parsing some invalid inputs in encoding/pem

...

libvpx VP8 Encoding Arbitrary Code

The vulnerability of the encoding function in the VP8 format of the libvpx library used by Google Chrome browser is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code when a user opens a specially crafted web page...

CVE-2021-29361

A buffer overflow vulnerability in FORMATS!ReadUtahRLE+0x340 of Irfanview 4.57 allows attackers to execute arbitrary code via a crafted RLE file...