Lucene search
+L

59 matches found

Github Security Blog
Github Security Blog
added 2026/02/24 3:44 p.m.10 views

ImageMagick has a heap buffer over-read in its MAP image decoder

A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding. ================================================================= ==4070926==ERROR: AddressSanitizer:...

9.1CVSS5.7AI score0.0037EPSS
SaveExploits0References5Affected Software19
OSV
OSV
added 2026/02/24 3:44 p.m.21 views

GHSA-42P5-62QQ-MMH7 ImageMagick has a heap buffer over-read in its MAP image decoder

A heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory disclosure during image decoding. ================================================================= ==4070926==ERROR: AddressSanitizer:...

5.3CVSS5.8AI score0.0037EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/02/24 6:11 a.m.14 views

CVE-2026-25987

A flaw was found in ImageMagick. A remote attacker could exploit a heap buffer over-read vulnerability in the MAP image decoder by providing a specially crafted MAP file. This could lead to the application crashing, resulting in a denial of service, or unintended memory disclosure during image...

9.1CVSS5.7AI score0.0037EPSS
SaveExploits0References4
NVD
NVD
added 2026/02/24 2:16 a.m.10 views

CVE-2026-25987

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory...

9.1CVSS0.0037EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/24 1:46 a.m.6 views

CVE-2026-25987 ImageMagick has heap buffer over-read in MAP image decoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory...

5.3CVSS6AI score
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2026/02/24 1:46 a.m.23 views

CVE-2026-25987

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the MAP image decoder when processing crafted MAP files, potentially leading to crashes or unintended memory...

9.1CVSS5.8AI score0.0037EPSS
SaveExploits0
Snyk
Snyk
added 2026/02/24 1:46 a.m.5 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the MAP image decoding. An attacker can cause application crashes or access unintended memory contents by submitting specially crafted MAP files. Remediation A fix was pushed into the master branch but not yet...

9.1CVSS5.6AI score0.0037EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/24 12:00 a.m.15 views

PT-2026-21636

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40 Description ImageMagick is software used for editing and manipulating digital images. A heap buffer over-read issue exists in the MAP image decoder when processing...

9.8CVSS6AI score0.00594EPSS
SaveExploits0References156
ATTACKERKB
ATTACKERKB
added 2026/01/27 12:45 a.m.7 views

CVE-2026-24686

go-tuf is a Go implementation of The Update Framework TUF. go-tuf's TAP 4 Multirepo Client uses the map file repository name string repoName as a filesystem path component when selecting the local metadata cache directory. Starting in version 2.0.0 and prior to version 2.4.1, if an application...

4.7CVSS5.9AI score0.00215EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/16 7:09 p.m.7 views

CVE-2021-47844

Xmind 2020 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into mind mapping files or custom headers. Attackers can craft malicious files with embedded JavaScript that execute system commands when opened, enabling remote code execution through mous...

6.1CVSS6.1AI score0.00353EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/16 12:00 a.m.17 views

PT-2026-3298

Xmind 2020 contains a cross-site scripting vulnerability that allows attackers to inject malicious payloads into mind mapping files or custom headers. Attackers can craft malicious files with embedded JavaScript that execute system commands when opened, enabling remote code execution through mous...

6.1CVSS7.7AI score0.00353EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2009-0839

Malware in sbrugna...

4.3CVSS6AI score0.02649EPSS
SaveExploits2References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2018-12901

Malware in sbrugna...

7.8CVSS7.6AI score0.02219EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.7 views

EUVD-2025-21747

Malicious code in bioql PyPI...

8.4CVSS6.6AI score0.0038EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/07/18 9:59 p.m.13 views

CVE-2025-34124

A buffer overflow vulnerability exists in Heroes of Might and Magic III Complete 4.0.0.0, HD Mod 3.808 build 9, and Demo 1.0.0.0 via malicious .h3m map files that exploit object sprite name parsing logic. The vulnerability occurs during in-game map loading when a crafted object name causes a buff...

8.4CVSS8.2AI score0.0038EPSS
SaveExploits1References1
NVD
NVD
added 2025/07/16 10:15 p.m.11 views

CVE-2025-34124

A buffer overflow vulnerability exists in Heroes of Might and Magic III Complete 4.0.0.0, HD Mod 3.808 build 9, and Demo 1.0.0.0 via malicious .h3m map files that exploit object sprite name parsing logic. The vulnerability occurs during in-game map loading when a crafted object name causes a buff...

8.4CVSS0.0038EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/07/16 9:08 p.m.2 views

CVE-2025-34124 Heroes of Might and Magic III .h3m Map File Buffer Overflow

A buffer overflow vulnerability exists in Heroes of Might and Magic III Complete 4.0.0.0, HD Mod 3.808 build 9, and Demo 1.0.0.0 via malicious .h3m map files that exploit object sprite name parsing logic. The vulnerability occurs during in-game map loading when a crafted object name causes a buff...

8.4CVSS8.1AI score0.0038EPSS
SaveExploits1References3
CVE
CVE
added 2025/07/16 9:08 p.m.28 views

CVE-2025-34124

CVE-2025-34124 affects Heroes of Might and Magic III Complete 4.0.0.0, HD Mod 3.808 build 9, and Demo 1.0.0.0. Description: a buffer overflow during in-game map loading is triggered by crafted .h3m map files through object sprite name parsing, potentially enabling arbitrary code execution. Exploi...

8.4CVSS7.6AI score0.0038EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/07/16 12:00 a.m.15 views

PT-2025-29886 · Unknown · Heroes Of Might/Magic Iii Complete +2

Name of the Vulnerable Software and Affected Versions: Heroes of Might and Magic III Complete versions 4.0.0.0 Heroes of Might and Magic III HD Mod versions 3.808 build 9 Heroes of Might and Magic III Demo version 1.0.0.0 Description: A buffer overflow vulnerability exists due to malicious .h3m m...

8.4CVSS7.3AI score0.0038EPSS
SaveExploits1References8
OSV
OSV
added 2022/08/20 10:04 a.m.7 views

MGASA-2022-0292 Updated teeworlds packages fix security vulnerability

Code execution via malicious map file CVE-2021-43518...

7.8CVSS7.7AI score0.01382EPSS
SaveExploits1References3
Rows per page
Query Builder