9037 matches found
Linux Distros Unpatched Vulnerability : CVE-2025-40322
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fbdev: bitblit: bound-check glyph index in bitputcs bitputcsaligned/unaligned derived the glyph pointer from the character value masked by 0xff/0x1ff, which may...
OESA-2025-2793 ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...
OESA-2025-2792 ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...
OESA-2025-2791 ImageMagick security update
Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...
SUSE CVE-2025-65955
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagick's Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls...
ImageMagick < 6.9.13-34 / 7.x < 7.1.2-9 Use-After-Free / Double-Free (GHSA-q3hc-j9x5-mp9m)
The remote host has a version of ImageMagick installed that is prior to 6.9.13-34 or 7.1.2-9. It is, therefore, affected by use-after-free and double-free vulnerabilities as referenced in the GHSA-q3hc-j9x5-mp9m advisory. - ImageMagick is free and open-source software used for editing and...
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues The following security issues were fixed: CVE-2022-50327: ACPI: processor: idle: Check acpifetchacpidev return value bsc1249859. CVE-2022-50334: hugetlbfs: fix null-ptr-deref in hugetlbfsparseparam bsc1249857...
Withdrawn Advisory: ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family
Withdrawn Advisory This advisory has been withdrawn because it does not affect the ImageMagick project's NuGet packages. Original Description We believe that we have discovered a potential security vulnerability in ImageMagickās Magick++ layer that manifests when Options::fontFamily is invoked wi...
EUVD-2025-200466
ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family...
CVE-2025-65955
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagickās Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls...
DEBIAN-CVE-2025-65955
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagickās Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls...
CVE-2025-65955 ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagickās Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls...
CVE-2025-65955
ImageMagickās Magick++ vulnerability CVE-2025-65955 manifests when Options::fontFamily is invoked with an empty string, causing a use-after-free/dangling font pointer in _drawInfo->font and potentially leading to crashes or heap corruption on cleanup or subsequent updates. The issue arises bec...
CVE-2025-65955 ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagickās Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls...
CVE-2025-65955 ImageMagick has a use-after-free/double-free risk in Options::fontFamily when clearing family
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagickās Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls...
CVE-2025-65955
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-9 and 6.9.13-34, there is a vulnerability in ImageMagickās Magick++ layer that manifests when Options::fontFamily is invoked with an empty string. Clearing a font family calls...
PT-2025-48786
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-9 ImageMagick versions prior to 6.9.13-34 Description ImageMagick is software used for editing and manipulating digital images. A flaw exists in the Magick++ layer when the Options::fontFamily function is...
EUVD-2025-199882
fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib...
Malicious Package
Overview tailwindcss-web-font-awesome is a malicious package. This package contains malicious code associated with a social engineering campaign called "Contagious Interview." The attackers target developers through fake job interviews or coding test assignments that require the installation of...
Fedora 43 : webkitgtk (2025-6f3e9e3af6)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-6f3e9e3af6 advisory. Prevent unsafe URI schemes from participating in media playback. Make jscvaluearraybuffergetdata function introspectable. Fix logging in to Google...