Lucene search
K

2241 matches found

Mageia
Mageia
added 2025/05/01 6:51 a.m.30 views

Updated imagemagick packages fix security vulnerabilities

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used. CVE-2025-43965 In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packetsize is mishandled related to the rendering of all channels in an arbitrary order...

7.5CVSS3.9AI score0.00466EPSS
Exploits0References2
OSV
OSV
added 2025/04/24 9:49 p.m.4 views

CLSA-2025-1745531344 libtiff: Fix of 2 CVEs

CVE-2023-40745: prevent integer overflow on hostile images to avoid heap-based buffer overflow and potential code execution - CVE-2023-41175: address integer overflows and bypass in raw2tiff.c to prevent heap-based buffer overflow and potential code execution...

6.5CVSS7.1AI score0.01131EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2025/04/24 3:23 a.m.4 views

SUSE CVE-2025-43965

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used...

5.7CVSS6.9AI score0.00466EPSS
Exploits0References8
Snyk
Snyk
added 2025/04/23 3:47 p.m.1 views

Incorrect Calculation of Buffer Size

Overview Affected versions of this package are vulnerable to Incorrect Calculation of Buffer Size due to mishandling of image depth after SetQuantumFormat is used. An attacker can manipulate the image processing results by submitting a specially crafted MIFF file. Remediation A fix was pushed int...

7.5CVSS6.9AI score0.00466EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2025/04/23 3:16 p.m.4 views

CVE-2025-46393

In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packetsize is mishandled related to the rendering of all channels in an arbitrary order...

2.9CVSS7.3AI score0.00348EPSS
Exploits0References2
NVD
NVD
added 2025/04/23 3:16 p.m.9 views

CVE-2025-46393

In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packetsize is mishandled related to the rendering of all channels in an arbitrary order...

5.3CVSS0.00348EPSS
Exploits0References2
OSV
OSV
added 2025/04/23 3:16 p.m.3 views

DEBIAN-CVE-2025-43965

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used...

7.5CVSS4.4AI score0.00466EPSS
Exploits0References1
OSV
OSV
added 2025/04/23 3:16 p.m.129 views

CVE-2025-43965

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used...

7.5CVSS6.8AI score
Exploits0References3
OSV
OSV
added 2025/04/23 3:16 p.m.0 views

UBUNTU-CVE-2025-43965

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used...

7.5CVSS5.8AI score0.00466EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/04/23 12:0 a.m.14 views

CVE-2025-43965

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used...

2.9CVSS0.00466EPSS
Exploits0References2
CVE
CVE
added 2025/04/23 12:0 a.m.258 views

CVE-2025-43965

ImageMagick’s CVE-2025-43965 affects MIFF image processing where image depth is mishandled after SetQuantumFormat, in builds prior to 7.1.1-44. Affected product: ImageMagick. Root cause: mishandling of image depth during MIFF processing when SetQuantumFormat is used (no additional details provide...

7.5CVSS6.9AI score0.00466EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/23 12:0 a.m.15 views

CVE-2025-46393

In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packetsize is mishandled related to the rendering of all channels in an arbitrary order...

2.9CVSS7.2AI score0.00348EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2025/04/23 12:0 a.m.11 views

CVE-2025-43965

In MIFF image processing in ImageMagick before 7.1.1-44, image depth is mishandled after SetQuantumFormat is used...

7.5CVSS4.4AI score0.00466EPSS
Exploits0
Debian CVE
Debian CVE
added 2025/04/23 12:0 a.m.9 views

CVE-2025-46393

In multispectral MIFF image processing in ImageMagick before 7.1.1-44, packetsize is mishandled related to the rendering of all channels in an arbitrary order...

5.3CVSS4.8AI score0.00348EPSS
Exploits0
Fedora
Fedora
added 2025/04/22 1:22 a.m.21 views

[SECURITY] Fedora 41 Update: giflib-5.2.2-6.fc41

giflib is a library for reading and writing gif images...

7.3CVSS7.1AI score0.01213EPSS
Exploits0
NVD
NVD
added 2025/04/21 12:15 a.m.22 views

CVE-2025-43967

libheif before 1.19.6 has a NULL pointer dereference in ImageItemGrid::getdecoder in image-items/grid.cc because a grid image can reference a nonexistent image item...

7.5CVSS0.00351EPSS
Exploits1References3
CNNVD
CNNVD
added 2025/04/18 12:0 a.m.2 views

PbootCMS 安全漏洞

PbootCMS is a PbootCMS open source content management system CMS for building websites for open source businesses developed using the PHP language. A security vulnerability exists in PbootCMS version 3.2.5, which stems from a server-side request forgery issue in the image processing component...

6.5CVSS4.3AI score0.00368EPSS
Exploits1References4
CNVD
CNVD
added 2025/04/11 12:0 a.m.11 views

Adobe Photoshop Desktops Heap Buffer Overflow Vulnerability

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. A heap buffer overflow vulnerability exists in Adobe Photoshop Desktops. The vulnerability is due to a failure to perform strict checksums on memory...

7.8CVSS7.9AI score0.00353EPSS
Exploits0References1
Snyk
Snyk
added 2025/04/09 5:5 p.m.1 views

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when processing large EXIF data structures. An attacker can cause denial of service by sending malicious images. Remediation Upgrade github.com/bep/imagemeta to version 0.10.0 or...

8.7CVSS6.9AI score0.00152EPSS
Exploits0References3
NVD
NVD
added 2025/04/07 8:15 p.m.10 views

CVE-2025-29769

libvips is a demand-driven, horizontally threaded image processing library. The heifsave operation could incorrectly determine the presence of an alpha channel in an input when it was not possible to determine the colour interpretation, known internally within libvips as "multiband". There aren't...

8.5CVSS0.00232EPSS
Exploits1References6
Rows per page
Query Builder