192270 matches found
EUVD-2026-97715
ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers can supply a crafted image that, when decoded under memory allocation failure conditions, causes freed memory to be reused...
CVE-2026-109271
The software ImageMagick versions 7.1.2-30 before 7.1.2-32 is vulnerable to a use after free condition in the WBINFO decoder . This flaw occurs when a memory allocation failure during image decoding causes freed memory to be reused. An attacker can supply a crafted image that triggers these condi...
CVE-2026-109268
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused,...
CVE-2026-109268 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Use After Free in PDF Writer via JPEG2000
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused,...
CVE-2026-109268 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Use After Free in PDF Writer via JPEG2000
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused,...
CVE-2026-109268
ImageMagick versions before 6.9.13-57 and 7.x before 7.1.2-32 are vulnerable to a use after free flaw in the PDF writer . The issue occurs when processing CMYK images using JPEG2000 compression . An attacker can provide a crafted CMYK image that, during the PDF writing process, causes the applica...
EUVD-2026-97712
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused,...
CVE-2026-109258
ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application...
CVE-2026-109257
FreeRDP before 3.32.0 contains a double-free vulnerability in nsccontextinitializeencode that leaves dangling plane pointers after a partial buffer growth failure. Attackers using a crafted RDP client can negotiate NSCodec with a large desktop geometry to trigger allocation failure, crashing the...
CVE-2026-109257 FreeRDP before 3.32.0 Double Free via NSCodec plane growth failure
FreeRDP before 3.32.0 contains a double-free vulnerability in nsccontextinitializeencode that leaves dangling plane pointers after a partial buffer growth failure. Attackers using a crafted RDP client can negotiate NSCodec with a large desktop geometry to trigger allocation failure, crashing the...
CVE-2026-109258 ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation
ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application...
CVE-2026-109257 FreeRDP before 3.32.0 Double Free via NSCodec plane growth failure
FreeRDP before 3.32.0 contains a double-free vulnerability in nsccontextinitializeencode that leaves dangling plane pointers after a partial buffer growth failure. Attackers using a crafted RDP client can negotiate NSCodec with a large desktop geometry to trigger allocation failure, crashing the...
CVE-2026-109257
FreeRDP versions before 3.32.0 are susceptible to a double-free vulnerability within the nsc_context_initialize_encode() function. The root cause is a partial buffer growth failure that leaves dangling plane pointers. An attacker can exploit this by using a crafted RDP client to negotiate NSCodec...
EUVD-2026-97701
FreeRDP before 3.32.0 contains a double-free vulnerability in nsccontextinitializeencode that leaves dangling plane pointers after a partial buffer growth failure. Attackers using a crafted RDP client can negotiate NSCodec with a large desktop geometry to trigger allocation failure, crashing the...
CVE-2026-109257
FreeRDP before 3.32.0 contains a double-free vulnerability in nsccontextinitializeencode that leaves dangling plane pointers after a partial buffer growth failure. Attackers using a crafted RDP client can negotiate NSCodec with a large desktop geometry to trigger allocation failure, crashing the...
CVE-2026-109258 ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation
ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application...
EUVD-2026-97702
ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application...
CVE-2026-109258
The ImageMagick software versions 7.1.0-20 before 7.1.2-32 are susceptible to an invalid memory free vulnerability within the fx operation . This issue is triggered when the initialization of an FX runtime entry fails, allowing an attacker to cause an invalid free . The primary consequences inclu...
CVE-2026-109254 FreeRDP 2.1.0 before 3.32.0 Use-After-Free via rdpsnd Disconnect Path
FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in the static rdpsnd channel disconnect path, which frees audio formats and device without joining playthread. A malicious RDP server can disconnect while asynchronous Wave2 playback processes queued PDUs, causing the client to...
CVE-2026-109254
FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in the static rdpsnd channel disconnect path, which frees audio formats and device without joining playthread. A malicious RDP server can disconnect while asynchronous Wave2 playback processes queued PDUs, causing the client to...