Lucene search
+L

117 matches found

Cvelist
Cvelist
added 2025/08/26 5:20 p.m.24 views

CVE-2025-55298 ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper...

7.5CVSS0.04354EPSS
SaveExploits1References3
Snyk
Snyk
added 2025/08/26 5:20 p.m.7 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

8.8CVSS7.7AI score0.04354EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.6 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.04354EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.9 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.04354EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/08/26 5:20 p.m.7 views

Use of Externally-Controlled Format String

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.8CVSS7.7AI score0.04354EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2025/08/26 5:20 p.m.3 views

CVE-2025-55298

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions 6.9.13-28 and 7.1.2-2, a format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper...

8.8CVSS8.3AI score0.04354EPSS
SaveExploits1
OSV
OSV
added 2025/08/26 3:29 p.m.5 views

GHSA-9CCG-6PJW-X645 ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution

Summary A format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from heap overflow to remote code...

7.5CVSS8.8AI score0.04354EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2025/08/26 3:29 p.m.12 views

ImageMagick has a Format String Bug in InterpretImageFilename leads to arbitrary code execution

Summary A format string bug vulnerability exists in InterpretImageFilename function where user input is directly passed to FormatLocaleString without proper sanitization. An attacker can overwrite arbitrary memory regions, enabling a wide range of attacks from heap overflow to remote code...

8.8CVSS8AI score0.04354EPSS
SaveExploits1References6Affected Software18
Positive Technologies
Positive Technologies
added 2025/08/26 12:0 a.m.3 views

PT-2025-34798

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.13-28 ImageMagick versions prior to 7.1.2-2 Description: ImageMagick is software used for editing and manipulating digital images. A format string bug exists in the InterpretImageFilename function where user...

9.8CVSS7.7AI score0.04354EPSS
SaveExploits9References73
Github Security Blog
Github Security Blog
added 2025/08/25 3:53 p.m.13 views

ImageMagick has a Heap Buffer Overflow in InterpretImageFilename

Heap Buffer Overflow in InterpretImageFilename Summary A heap buffer overflow was identified in the InterpretImageFilename function of ImageMagick. The issue stems from an off-by-one error that causes out-of-bounds memory access when processing format strings containing consecutive percent signs...

9.8CVSS7.9AI score0.00617EPSS
SaveExploits1References7Affected Software18
OSV
OSV
added 2025/08/25 3:53 p.m.6 views

GHSA-HM4X-R5HC-794F ImageMagick has a Heap Buffer Overflow in InterpretImageFilename

Heap Buffer Overflow in InterpretImageFilename Summary A heap buffer overflow was identified in the InterpretImageFilename function of ImageMagick. The issue stems from an off-by-one error that causes out-of-bounds memory access when processing format strings containing consecutive percent signs...

3.7CVSS6.7AI score0.00617EPSS
SaveExploits1References7
OSV
OSV
added 2025/08/25 3:43 p.m.5 views

GHSA-QH3H-J545-H8C9 ImageMagick has a Stack Buffer Overflow in image.c

Hi, we have found a stack buffer overflow and would like to report this issue. Could you confirm if this qualifies as a security vulnerability? I am happy to provide any additional information needed. Summary In ImageMagick's magick mogrify command, specifying multiple consecutive %d format...

7.4CVSS6.8AI score0.00792EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2025/08/25 3:43 p.m.9 views

ImageMagick has a Stack Buffer Overflow in image.c

Hi, we have found a stack buffer overflow and would like to report this issue. Could you confirm if this qualifies as a security vulnerability? I am happy to provide any additional information needed. Summary In ImageMagick's magick mogrify command, specifying multiple consecutive %d format...

9.8CVSS6.8AI score0.00792EPSS
SaveExploits1References7Affected Software18
Tenable Nessus
Tenable Nessus
added 2025/08/22 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2025-53014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overfl...

9.8CVSS6.9AI score0.00617EPSS
SaveExploits1References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in sanitize-interpret-zero-emulate-container (npm)

The package sanitize-interpret-zero-emulate-container was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.5 views

Malicious code in slow-moon-air-scale-interpret (npm)

The package slow-moon-air-scale-interpret was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.5 views

Malicious code in delta-interpret-try-grid-alert (npm)

The package delta-interpret-try-grid-alert was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.4 views

MAL-2025-15099 Malicious code in authorize-interpret-notify-benchmark-protected (npm)

The package authorize-interpret-notify-benchmark-protected was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.6 views

Malicious code in sanitize-encode-interpret-sigma-water (npm)

The package sanitize-encode-interpret-sigma-water was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-23282 Malicious code in interpret-rain-delta-sed-resolve (npm)

The package interpret-rain-delta-sed-resolve was found to contain malicious code...

7.2AI score
SaveExploits0
Rows per page
Query Builder