Lucene search
K

19 matches found

OSV
OSV
added 2026/04/07 12:24 p.m.3 views

SUSE-SU-2026:1203-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write bsc1259446. - CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow bsc1259447. -...

8.1CVSS6AI score0.00067EPSS
Exploits0References41
OSV
OSV
added 2026/03/20 2:26 p.m.3 views

OESA-2026-1694 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

8.1CVSS6.7AI score0.00067EPSS
Exploits0References17
Snyk
Snyk
added 2026/03/12 2:8 p.m.1 views

Stack-based Buffer Overflow

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.6CVSS5.9AI score0.00018EPSS
Exploits0References2
OSV
OSV
added 2026/03/12 2:8 p.m.1 views

GHSA-932H-JW47-73JM ImageMagick vulnerable to stack corruption through long morphology kernel names or arrays

A stack buffer overflow exists in ImageMagick's morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-size stack buffers via memcpy without bounds checking, resulting in stack corruption...

7.1CVSS6AI score0.00018EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2026/03/11 12:24 a.m.1 views

SUSE CVE-2026-28494

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow exists in ImageMagick's morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-siz...

8.6CVSS6AI score0.00018EPSS
Exploits0References7
NVD
NVD
added 2026/03/10 7:43 a.m.1 views

CVE-2026-28494

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow exists in ImageMagick's morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-siz...

7.1CVSS0.00018EPSS
Exploits0References1
OSV
OSV
added 2026/03/10 7:43 a.m.2 views

DEBIAN-CVE-2026-28494

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow exists in ImageMagick's morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-siz...

7.1CVSS8.1AI score0.00018EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2026/03/09 9:31 p.m.0 views

CVE-2026-28494

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow exists in ImageMagick's morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-siz...

7.1CVSS6.1AI score0.00018EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2026/03/09 9:31 p.m.6 views

CVE-2026-28494

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow exists in ImageMagick's morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-siz...

7.1CVSS6.1AI score0.00018EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.2 views

PT-2026-24124

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 Description ImageMagick is software used for editing and manipulating digital images. A stack buffer overflow exists in the morphology kernel parsing functions...

7.1CVSS6.1AI score0.00063EPSS
Exploits0References102
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-12575

Malware in sbrugna...

8.8CVSS8.1AI score0.00047EPSS
Exploits1References4
CVE
CVE
added 2025/02/26 1:55 a.m.131 views

CVE-2022-49145

CVE-2022-49145 affects the Linux kernel's ACPI CPPC parsing of _CPC data. The root cause is an out-of-bounds access when the NumEntries field is less than 2, which could lead to improper access of the Revision element. A fix has been implemented in the kernel to avoid this access. The vulnerabili...

7.1CVSS5.4AI score0.00011EPSS
Exploits0References9Affected Software1
Cvelist
Cvelist
added 2024/12/02 10:18 a.m.11 views

CVE-2024-33036 Use of Out-of-range Pointer Offset in Camera Driver

Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access...

6.7CVSS0.00082EPSS
Exploits0References1
OSV
OSV
added 2023/12/05 3:15 a.m.1 views

UBUNTU-CVE-2023-33053

Memory corruption in Kernel while parsing metadata...

8.4CVSS5.8AI score0.00128EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 3:44 a.m.3 views

SUSE CVE-2021-25682

It was discovered that the getpidinfo function in data/apport did not properly parse the /proc/pid/status file from the kernel...

8.8CVSS7AI score0.00114EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:44 a.m.0 views

SUSE CVE-2021-25683

It was discovered that the getstarttime function in data/apport did not properly parse the /proc/pid/stat file from the kernel...

8.8CVSS7AI score0.00047EPSS
Exploits1References3
OSV
OSV
added 2021/06/11 3:15 a.m.1 views

CVE-2021-25683

It was discovered that the getstarttime function in data/apport did not properly parse the /proc/pid/stat file from the kernel...

7.8CVSS7.1AI score0.00047EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2021/02/02 6:0 p.m.21 views

CVE-2021-25683

It was discovered that the getstarttime function in data/apport did not properly parse the /proc/pid/stat file from the kernel...

8.8CVSS7.1AI score0.00047EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2011/08/11 12:0 a.m.21 views

Microsoft Windows Kernel Denial of Service Vulnerability (2556532)

This host is missing an important security update according to Microsoft Bulletin MS11-068. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

4.7CVSS5AI score0.01221EPSS
Exploits1References3
Rows per page
Query Builder