Lucene search
K

9 matches found

Snyk
Snyk
added 2026/03/12 2:8 p.m.3 views

Stack-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow in ParseKernelArray in morphology.c. An attacker can cause memory corruption by supplying malicious kernel strings. Remediation A fix was pushed into the master branch but not yet published. References - GitH...

8.6CVSS5.8AI score0.00018EPSS
Exploits0References2
Snyk
Snyk
added 2026/03/12 2:8 p.m.1 views

Stack-based Buffer Overflow

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.6CVSS5.9AI score0.00018EPSS
Exploits0References2
Snyk
Snyk
added 2026/03/12 2:8 p.m.2 views

Stack-based Buffer Overflow

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.6CVSS5.9AI score0.00018EPSS
Exploits0References2
Snyk
Snyk
added 2026/03/12 2:8 p.m.1 views

Stack-based Buffer Overflow

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

8.6CVSS5.9AI score0.00018EPSS
Exploits0References2
Snyk
Snyk
added 2026/03/12 2:8 p.m.2 views

Stack-based Buffer Overflow

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.6CVSS5.9AI score0.00018EPSS
Exploits0References2
OSV
OSV
added 2026/03/12 2:8 p.m.1 views

GHSA-932H-JW47-73JM ImageMagick vulnerable to stack corruption through long morphology kernel names or arrays

A stack buffer overflow exists in ImageMagick's morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-size stack buffers via memcpy without bounds checking, resulting in stack corruption...

7.1CVSS6AI score0.00018EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2026/03/12 2:8 p.m.4 views

ImageMagick vulnerable to stack corruption through long morphology kernel names or arrays

A stack buffer overflow exists in ImageMagick's morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-size stack buffers via memcpy without bounds checking, resulting in stack corruption...

7.1CVSS6.1AI score0.00018EPSS
Exploits0References4Affected Software19
RedhatCVE
RedhatCVE
added 2026/03/10 6:30 a.m.0 views

CVE-2026-28494

A flaw was found in ImageMagick. This vulnerability, a stack buffer overflow, allows an attacker to cause stack corruption by providing maliciously crafted kernel strings. This can lead to arbitrary code execution or a denial of service DoS, impacting the availability and integrity of the system...

7.1CVSS6.3AI score0.00018EPSS
Exploits0References4
OSV
OSV
added 2026/03/09 9:31 p.m.0 views

CVE-2026-28494 ImageMagick affected by stack corruption through long morphology kernel names or arrays

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow exists in ImageMagick's morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-siz...

7.1CVSS6AI score0.00018EPSS
Exploits0References3
Rows per page
Query Builder