Lucene search
K

102 matches found

EUVD
EUVD
added 2026/05/04 5:51 p.m.3 views

EUVD-2026-27075

CImg Library is a C++ library for image processing. Prior to commit 4ca26bc, there is an integer overflow vulnerability in the WHD size computation inside loadpnm that can bypass the memory allocation guard. A crafted PNM/PGM/PPM file with large dimension values causes the overflow to wrap around...

6.1CVSS6.1AI score0.00142EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/05/04 12:0 a.m.4 views

PT-2026-36892

Name of the Vulnerable Software and Affected Versions CImg Library versions prior to commit 4ca26bc Description An integer overflow exists in the load pnm function during the computation of WHD size. A specially crafted PNM, PGM, or PPM file containing large dimension values can cause the...

6.1CVSS6AI score0.00142EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2026/04/22 9:8 p.m.3 views

CVE-2026-41314 pypdf: Manipulated FlateDecode image dimensions can exhaust RAM

pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using /FlateDecode with large size values. This has been fixed in pypdf 6.10.2...

4.8CVSS5.6AI score0.00226EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/21 7:21 p.m.45 views

CVE-2026-33813 Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms...

0.0032EPSS
Exploits0References3
Snyk
Snyk
added 2026/04/16 9:30 p.m.4 views

Memory Allocation with Excessive Size Value

Overview PyPDF2 is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the FlateDecode image processing when handling images with large size values. An...

6.5CVSS5.7AI score0.00226EPSS
Exploits0References2
OSV
OSV
added 2026/03/25 5:31 p.m.6 views

MGASA-2026-0067 Updated graphicsmagick packages fix security vulnerabilities

GraphicsMagick has a stack write buffer overflow in MNG encoder. CVE-2026-28690 GraphicsMagick has a Heap Overflow when writing extremely large image profile in the PNG encoder. CVE-2026-30883...

7.8CVSS6.1AI score0.00123EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2026/03/11 12:24 a.m.0 views

SUSE CVE-2026-30883

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

8.6CVSS5.8AI score0.00123EPSS
Exploits0References8
OSV
OSV
added 2026/03/10 9:5 p.m.2 views

GHSA-QMW5-2P58-XVRC ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder

An extremely large image profile could result in a heap overflow when encoding a PNG image...

5.7CVSS5.8AI score0.00123EPSS
Exploits0References4
EUVD
EUVD
added 2026/03/10 9:5 p.m.1 views

EUVD-2026-10392

ImageMagick is vulnerable to Heap Overflow when writing extremely large image profile in the PNG encoder...

5.7CVSS5.8AI score0.00123EPSS
Exploits0References3
NVD
NVD
added 2026/03/10 7:44 a.m.3 views

CVE-2026-30883

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

7.8CVSS0.00123EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/10 6:31 a.m.2 views

CVE-2026-30883

A flaw was found in ImageMagick, a free and open-source software used for editing and manipulating digital images. A local attacker could exploit this vulnerability by providing an extremely large image profile when encoding a PNG image. This could result in a heap overflow, leading to a Denial o...

7.8CVSS5.8AI score0.00123EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/03/10 12:0 a.m.1 views

PT-2026-24618

An overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images...

5.7CVSS5.8AI score
Exploits0References4
Positive Technologies
Positive Technologies
added 2026/03/10 12:0 a.m.2 views

PT-2026-24634

An extremely large image profile could result in a heap overflow when encoding a PNG image...

5.7CVSS5.8AI score0.00123EPSS
Exploits0References5
OSV
OSV
added 2026/03/09 9:45 p.m.1 views

CVE-2026-30883 ImageMagick has a Heap Overflow when writing extremely large image profile in the PNG encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

5.7CVSS5.8AI score0.00123EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/03/09 9:45 p.m.3 views

CVE-2026-30883

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, an extremely large image profile could result in a heap overflow when encoding a PNG image. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

7.8CVSS7.8AI score0.00123EPSS
Exploits0
Packet Storm
Packet Storm
added 2026/03/03 12:0 a.m.147 views

📄 libvips 8.19.0 vips_extract_area_build Local Integer Overflow

This Python script performs an advanced security audit on libvips version 8.19.0. It specifically targets the integer overflow vulnerability in the function vipsextractareabuild...

5.5CVSS6AI score0.00214EPSS
Exploits2
Cvelist
Cvelist
added 2026/02/27 8:13 p.m.19 views

CVE-2026-28231 pillow_heif Has Integer Overflow in Encode Path Buffer Validation that Leads to Heap Out-of-Bounds Read

pillowheif is a Python library for working with HEIF images and plugin for Pillow. Prior to version 1.3.0, an integer overflow in the encode path buffer validation of pillowheif.c allows an attacker to bypass bounds checks by providing large image dimensions, resulting in a heap out-of-bounds rea...

6.9CVSS0.00632EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2026/02/24 3:31 p.m.17 views

ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions

WriteUHDRImage in coders/uhdr.c uses int arithmetic to compute the pixel buffer size. When image dimensions are large, the multiplication overflows 32-bit int, causing an undersized heap allocation followed by an out-of-bounds write. This can crash the process or potentially lead to an out of...

8.2CVSS5.6AI score0.0034EPSS
Exploits0References5Affected Software19
Cvelist
Cvelist
added 2026/02/24 12:53 a.m.19 views

CVE-2026-25794 ImageMagick has heap-buffer-overflow via signed integer overflow in `WriteUHDRImage` when writing UHDR images with large dimensions

ImageMagick is free and open-source software used for editing and manipulating digital images. WriteUHDRImage in coders/uhdr.c uses int arithmetic to compute the pixel buffer size. Prior to version 7.1.2-15, when image dimensions are large, the multiplication overflows 32-bit int, causing an...

8.2CVSS0.0034EPSS
Exploits0References1
Snyk
Snyk
added 2026/02/24 12:53 a.m.5 views

Integer Overflow or Wraparound

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

8.2CVSS6.2AI score0.0034EPSS
Exploits0References2
Rows per page
Query Builder