Lucene search
+L

2670 matches found

Snyk
Snyk
•added 2026/02/24 3:46 p.m.•10 views

Infinite loop

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6.7AI score0.00346EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:46 p.m.•13 views

Infinite loop

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

8.7CVSS6.7AI score0.00346EPSS
SaveExploits0References2
OSV
OSV
•added 2026/02/24 3:46 p.m.•19 views

GHSA-V994-63CG-9WJ3 ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

A crafted profile contain invalid IPTC data may cause an infinite loop when writing it with IPTCTEXT...

6.2CVSS7AI score0.0035EPSS
SaveExploits0References5
OSV
OSV
•added 2026/02/24 3:43 p.m.•10 views

GHSA-FWQW-2X5X-W566 ImageMagick has Use After Free in MSLStartElement in "coders/msl.c"

A crafted MSL script triggers a heap-use-after-free. The operation element handler replaces and frees the image while the parser continues reading from it, leading to a UAF in ReadBlobString during further parsing...

5.3CVSS7.1AI score0.00515EPSS
SaveExploits0References5
Snyk
Snyk
•added 2026/02/24 3:36 p.m.•11 views

NULL Pointer Dereference

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS6.3AI score0.0057EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:36 p.m.•13 views

NULL Pointer Dereference

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

7.5CVSS6.3AI score0.0057EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/02/24 3:29 p.m.•18 views

ImageMagick: Out of bounds read in multiple coders read raw pixel data

A heap buffer over-read vulnerability exists in multiple raw image format handles. The vulnerability occurs when processing images with -extract dimensions larger than -size dimensions, causing out-of-bounds memory reads from a heap-allocated buffer...

5.5CVSS7AI score0.00187EPSS
SaveExploits0References5Affected Software16
Snyk
Snyk
•added 2026/02/24 3:28 p.m.•12 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6.4AI score0.00417EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:28 p.m.•14 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6.4AI score0.00417EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:28 p.m.•13 views

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6.4AI score0.00417EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:27 p.m.•12 views

Out-of-bounds Read

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS7.1AI score0.00395EPSS
SaveExploits0References2
OSV
OSV
•added 2026/02/24 2:16 a.m.•7 views

DEBIAN-CVE-2026-25987

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory...

9.1CVSS6.8AI score0.00443EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/24 2:16 a.m.•7 views

DEBIAN-CVE-2026-25968

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflow occurs when processing the an attribute in msl.c. A long value overflows a fixed-size stack buffer, leading to memory corruption. Versio...

9.8CVSS7.2AI score0.00466EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/02/24 2:01 a.m.•13 views

Expired Pointer Dereference

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

6.9CVSS6.2AI score0.00418EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/24 1:52 a.m.•66 views

CVE-2026-26066

CVE-2026-26066 affects ImageMagick. A crafted IPTC profile with invalid IPTC data can cause an infinite loop when writing with IPTCTEXT. A patch exists in versions 7.1.2-15 and 6.9.13-40; remediation is to update ImageMagick to a fixed release (or newer) to mitigate the DoS risk from endless proc...

7.5CVSS6.8AI score0.0035EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
•added 2026/02/24 1:52 a.m.•14 views

Infinite loop

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.5CVSS6.7AI score0.0035EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 1:48 a.m.•11 views

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

7.5CVSS6.5AI score0.00483EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 1:46 a.m.•14 views

Out-of-bounds Read

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.1CVSS6.5AI score0.00443EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 1:44 a.m.•11 views

Buffer Access with Incorrect Length Value

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.5AI score0.00513EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 1:44 a.m.•16 views

Buffer Access with Incorrect Length Value

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.5AI score0.00513EPSS
SaveExploits0References2
Rows per page
Query Builder