62658 matches found
GHSA-G22Q-F7GC-5JHR ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop
An incorrect loop in the ICON decoder can result in an out of bounds heap write resulting in a crash...
EUVD-2026-36188
ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop...
EUVD-2026-36187
ImageMagick: Policy Bypass can Trigger an Out-of-Memory condition...
EUVD-2026-36184
ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions...
ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions
A missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crashes in other operations...
EUVD-2026-36180
ImageMagick has an Infinite Loop in subimage-search with crafted image...
ImageMagick has an Infinite Loop in subimage-search with crafted image
An infinite loop in the subimage-search operation can happen when using a crafted image...
GHSA-5V62-8FQ6-CP9M ImageMagick has an Infinite Loop in subimage-search with crafted image
An infinite loop in the subimage-search operation can happen when using a crafted image...
EUVD-2026-36179
ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the absence of a restriction on tile sizes in the TIFF image decoding process. An attacker can cause excessive memory consumption by providing a specially crafted image file wi...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the absence of a restriction on tile sizes in the TIFF image decoding process. An attacker can cause excessive memory consumption by providing a specially crafted image file wi...
Uncaught Exception
Overview Affected versions of this package are vulnerable to Uncaught Exception in the webp decoder when processing a VP8 chunk with dimensions that do not match the canvas size. An attacker can cause a denial of service by supplying a crafted WebP image that triggers a panic during decoding...
DEBIAN-CVE-2026-46601
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size...
CVE-2026-46602
The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption...
CVE-2026-46601
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size...
UBUNTU-CVE-2026-46602
The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption...
CVE-2026-46602
The golang-x-image package is vulnerable to unbounded memory consumption because the TIFF decoder fails to set a size limit on tiles in tiled images. A malicious or corrupt image with a very large tile can trigger this issue, potentially leading to service failure or remote exploitation. Remediat...
CVE-2026-46601
The webp decoder is vulnerable to a panic condition when processing a VP8 chunk where the dimensions do not match the canvas size. This vulnerability impacts multiple packages including mailpit (fixed in version 1.29.7-r1), ollama (fixed in versions 0.23.4-r2, 0.30.10-r0, 0.31.2-r2, 0.32.11-r3), ...
