Lucene search
+L

15474 matches found

Github Security Blog
Github Security Blog
added 2025/12/30 10:54 p.m.12 views

ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack

Summary Using Magick to read a malicious SVG file resulted in a DoS attack. Details bt obtained using gdb: 4 0x0000555555794c9c in ResizeMagickMemory memory=0x7fffee203800, size=391344 at MagickCore/memory.c:1443 5 0x0000555555794e5a in ResizeQuantumMemory memory=0x7fffee203800, count=48918,...

7.5CVSS7.3AI score0.00632EPSS
SaveExploits1References4Affected Software17
EUVD
EUVD
added 2025/12/30 10:54 p.m.7 views

EUVD-2025-205813

ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack...

5.3CVSS6.3AI score0.00632EPSS
SaveExploits1References3
OSV
OSV
added 2025/12/30 10:54 p.m.6 views

GHSA-P27M-HP98-6637 ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack

Summary Using Magick to read a malicious SVG file resulted in a DoS attack. Details bt obtained using gdb: 4 0x0000555555794c9c in ResizeMagickMemory memory=0x7fffee203800, size=391344 at MagickCore/memory.c:1443 5 0x0000555555794e5a in ResizeQuantumMemory memory=0x7fffee203800, count=48918,...

5.3CVSS7.2AI score0.00632EPSS
SaveExploits1References4
NVD
NVD
added 2025/12/30 5:15 p.m.7 views

CVE-2025-68618

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, using Magick to read a malicious SVG file resulted in a DoS attack. Version 7.1.2-12 fixes the issue...

7.5CVSS0.00632EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2025/12/30 5:15 p.m.8 views

CVE-2025-68618

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, using Magick to read a malicious SVG file resulted in a DoS attack. Version 7.1.2-12 fixes the issue...

7.5CVSS6.8AI score0.00632EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2025/12/30 5:15 p.m.6 views

CVE-2025-69204

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, in the WriteSVGImage function, using an int variable to store numberattributes caused an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack...

7.5CVSS7.1AI score0.00583EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2025/12/30 5:15 p.m.4 views

CVE-2025-68950

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file wi...

6.2CVSS6.6AI score0.00182EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/30 5:15 p.m.8 views

UBUNTU-CVE-2025-68618

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, using Magick to read a malicious SVG file resulted in a DoS attack. Version 7.1.2-12 fixes the issue...

7.5CVSS5.8AI score0.00632EPSS
SaveExploits1References5
OSV
OSV
added 2025/12/30 5:15 p.m.7 views

UBUNTU-CVE-2025-68950

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file wi...

6.2CVSS5.9AI score0.00182EPSS
SaveExploits0References5
OSV
OSV
added 2025/12/30 5:15 p.m.8 views

UBUNTU-CVE-2025-69204

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, in the WriteSVGImage function, using an int variable to store numberattributes caused an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack...

7.5CVSS6.2AI score0.00583EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2025/12/30 4:56 p.m.8 views

CVE-2025-69204

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, in the WriteSVGImage function, using an int variable to store numberattributes caused an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack...

7.5CVSS6.1AI score0.00583EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2025/12/30 4:56 p.m.2 views

CVE-2025-69204 ImageMagick converting a malicious MVG file to SVG caused an integer overflow.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, in the WriteSVGImage function, using an int variable to store numberattributes caused an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack...

5.3CVSS7AI score0.00583EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2025/12/30 4:56 p.m.6 views

CVE-2025-69204

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, in the WriteSVGImage function, using an int variable to store numberattributes caused an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack...

7.5CVSS7.4AI score0.00583EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2025/12/30 4:50 p.m.12 views

CVE-2025-68950

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file wi...

6.2CVSS5AI score0.00182EPSS
SaveExploits0
CVE
CVE
added 2025/12/30 4:50 p.m.87 views

CVE-2025-68950

ImageMagick (affected component: MVG handling) is vulnerable to a DoS due to Magick failing to detect circular references between two MVGs, causing a stack overflow when reading an MVG file. The issue is fixed in version 7.1.2-12; upgrade to 7.1.2-12 or later to remediate.

6.2CVSS6.4AI score0.00182EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2025/12/30 4:14 p.m.74 views

CVE-2025-68618

CVE-2025-68618 affects ImageMagick; Magick SVG reading could cause a DoS by unbounded SVG depth. Impact: DoS vulnerability; fix is in version 7.1.2-12. Upgrade to 7.1.2-12 or newer to remediate.

7.5CVSS6.3AI score0.00632EPSS
SaveExploits1References2Affected Software1
AlpineLinux
AlpineLinux
added 2025/12/30 4:14 p.m.10 views

CVE-2025-68618

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, using Magick to read a malicious SVG file resulted in a DoS attack. Version 7.1.2-12 fixes the issue...

7.5CVSS6.8AI score0.00632EPSS
SaveExploits1
OSV
OSV
added 2025/12/30 4:14 p.m.7 views

CVE-2025-68618 Magick's failure to limit the depth of SVG file reads caused a DoS attack.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, using Magick to read a malicious SVG file resulted in a DoS attack. Version 7.1.2-12 fixes the issue...

5.3CVSS6.7AI score
SaveExploits0References4
OSV
OSV
added 2025/12/30 9:38 a.m.3 views

ROOT-OS-DEBIAN-13-CVE-2025-66628 CVE-2025-66628 in rootio-imagemagick - Patched by Root

Root has patched CVE-2025-66628 in the rootio-imagemagick package for Root:Debian:13. Multiple fixed versions available...

7.5CVSS5.4AI score0.00498EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/12/30 12:00 a.m.7 views

ImageMagick 输入验证错误漏洞

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert or write images in many formats. An input validation error vulnerability exists in versions prior to ImageMagick 7.1.2-12, which stems from an integer overflow in the WriteSVGImage...

7.5CVSS6.3AI score0.00583EPSS
SaveExploits1References3
Rows per page
Query Builder