52804 matches found
CVE-2026-45358
A flaw was found in ImageMagick, a free and open-source software for editing and manipulating digital images. A remote attacker could exploit an off-by-one error in the meta encoder to read a single byte outside of allocated memory. This out-of-bounds read could lead to the disclosure of sensitiv...
CVE-2026-56367
A vulnerability in the ImageMagick image processing tool could allow an attacker to crash the application or access sensitive information by uploading a maliciously crafted Photoshop PSB file. Mitigation To reduce the risk, avoid processing untrusted PSB Photoshop Big files with ImageMagick...
GO-2026-5758 containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd
containerd CRI — image-config LABEL flows to restart-monitor binary:// logger: host-root command execution from an image pull in github.com/containerd/containerd...
GO-2026-5604 Docker MCP Gateway: Argument injection via OCI image label YAML in github.com/docker/mcp-gateway
Docker MCP Gateway: Argument injection via OCI image label YAML in github.com/docker/mcp-gateway...
GO-2026-5172 Ech0 has Stored XSS via SVG Upload and Content-Type Validation Bypass in File Upload in github.com/lin-snow/ech0
Ech0 has Stored XSS via SVG Upload and Content-Type Validation Bypass in File Upload in github.com/lin-snow/ech0. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports...
GO-2026-5475 containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd
containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd...
EUVD-2026-36188
ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop...
GHSA-G22Q-F7GC-5JHR ImageMagick has out-of-bounds write in ICON decoder due to incorrect loop
An incorrect loop in the ICON decoder can result in an out of bounds heap write resulting in a crash...
EUVD-2026-36187
ImageMagick: Policy Bypass can Trigger an Out-of-Memory condition...
ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions
A missing check in the DCM decoder could result in an image with invalid dimensions and that could cause crashes in other operations...
EUVD-2026-36184
ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions...
EUVD-2026-36180
ImageMagick has an Infinite Loop in subimage-search with crafted image...
GHSA-5V62-8FQ6-CP9M ImageMagick has an Infinite Loop in subimage-search with crafted image
An infinite loop in the subimage-search operation can happen when using a crafted image...
EUVD-2026-36179
ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method...
DEBIAN-CVE-2026-46601
The webp decoder can panic when processing a VP8 chunk with dimensions that do not match the canvas size...
CVE-2026-46602
The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption...
UBUNTU-CVE-2026-46602
The TIFF decoder does not set a limit on the size of tiles in tiled images, permitting a malicious or corrupt image containing a very large tile to cause unbounded memory consumption...
CVE-2026-46602
The CVE-2026-46602 issue affects the TIFF decoder in golang.org/x/image: it does not enforce a limit on tile sizes in tiled TIFF images, which can lead to unbounded memory consumption when processing a malicious or corrupted image with a very large tile. This is stated across multiple sources in ...
