Lucene search
K

38 matches found

OSV
OSV
added 2026/05/22 1:10 p.m.2 views

GHSA-P93H-F2JC-477J ImageMagick: Heap Buffer Over-Write in distributed pixel cache server

An attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-write in the server process...

4.1CVSS5.9AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/22 12:0 a.m.6 views

PT-2026-42811

An attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-write in the server process...

4.1CVSS5.9AI score
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2026-46520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - Unknown description CVE-2026-46520 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenabl...

5.8AI score
Exploits0References2
Snyk
Snyk
added 2026/05/21 9:42 p.m.6 views

Off-by-one Error

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

6.9CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/05/21 9:42 p.m.7 views

Off-by-one Error

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/05/21 9:42 p.m.8 views

Off-by-one Error

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/05/21 9:42 p.m.4 views

Off-by-one Error

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.9CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/05/21 9:42 p.m.6 views

Off-by-one Error

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/05/21 9:42 p.m.5 views

Off-by-one Error

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/05/21 9:42 p.m.8 views

Off-by-one Error

Overview Affected versions of this package are vulnerable to Off-by-one Error in the json and yaml encoder process. An attacker can cause a heap buffer overwrite by providing specially crafted input data. Remediation A fix was pushed into the master branch but not yet published. References - GitH...

6.9CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/05/21 9:42 p.m.5 views

Off-by-one Error

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/05/21 9:42 p.m.4 views

Off-by-one Error

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.9AI score
Exploits0References2
Snyk
Snyk
added 2026/05/18 8:37 p.m.5 views

Out-of-bounds Write

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.1CVSS5.9AI score
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/03/22 12:0 a.m.5 views

SUSE SLES15 / openSUSE 15 Security Update : GraphicsMagick (SUSE-SU-2026:0938-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0938-1 advisory. - CVE-2026-28691: missing check in the JBIG decoder can lead to an uninitialized pointer dereference bsc1259455. - CVE-2026-30883...

7.8CVSS6.1AI score0.00063EPSS
Exploits0References7
OSV
OSV
added 2026/03/10 9:5 p.m.2 views

GHSA-56JP-JFQG-F8F4 ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder

An overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images...

5.7CVSS5.8AI score0.00018EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2026/03/10 9:5 p.m.1 views

ImageMagick is vulnerable to heap buffer over-write on 32-bit systems in SFW decoder

An overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images...

5.7CVSS5.8AI score0.00018EPSS
Exploits0References4Affected Software19
RedhatCVE
RedhatCVE
added 2025/05/08 5:6 p.m.11 views

CVE-2025-32022

Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects...

4.6CVSS7AI score0.00071EPSS
Exploits0References1
NVD
NVD
added 2025/05/06 5:16 p.m.10 views

CVE-2025-32022

Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects...

4.6CVSS0.00071EPSS
Exploits0References2
OSV
OSV
added 2025/05/06 4:57 p.m.3 views

CVE-2025-32022 Finit has heap based buffer overwrite in urandom.so plugin

Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects...

4.6CVSS6.8AI score0.00071EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/05/06 4:57 p.m.10 views

CVE-2025-32022 Finit has heap based buffer overwrite in urandom.so plugin

Finit provides fast init for Linux systems. Finit's urandom plugin has a heap buffer overwrite vulnerability at boot which leads to it overwriting other parts of the heap, possibly causing random instabilities and undefined behavior. The urandom plugin is enabled by default, so this bug affects...

4.6CVSS7.1AI score0.00071EPSS
Exploits0References2
Rows per page
Query Builder