Lucene search
+L

31 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•21 views

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, there was a heap-use-after-free vulnerability in the MSL encoder, where a cloned image was destroyed twice. The MSL encoder does not support writing MSL files, ...

5.3CVSS6AI score0.00201EPSS
SaveExploits0References2
osv_jlsec
osv_jlsec
•added 2026/07/30 4:02 p.m.•33 views

JLSEC-2026-943 ImageMagick has memory leak in msl encoder

Memory leak exists in coders/msl.c. In the WriteMSLImage function of the msl.c file, resources are allocated. But the function returns early without releasing these allocated resources. ==78983== Memcheck, a memory error detector ==78983== Copyright C 2002-2022, and GNU GPL'd, by Julian Seward et...

5.3CVSS6.4AI score0.00369EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•6 views

PT-2026-76367

A heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write capability has been removed. SUMMARY: AddressSanitizer: heap-use-after-free MagickCore/image.c:1195 in DestroyImage Shadow bytes around t...

5.3CVSS6AI score0.00201EPSS
SaveExploits0References5
osv_suse
osv_suse
•added 2026/04/20 4:15 p.m.•14 views

SUSE-SU-2026:1497-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service via multi-layer nested MVG to SVG conversion bsc1258790. - CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write bsc1259446. - CVE-2026-28494: missing bounds checks in the...

8.1CVSS6.7AI score0.00493EPSS
SaveExploits0References43
Tenable Nessus
Tenable Nessus
•added 2026/04/10 12:00 a.m.•16 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ImageMagick (UTSA-2026-007084)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007084 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free...

5.3CVSS5.9AI score0.00201EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/04/01 12:00 a.m.•28 views

Amazon Linux 2023 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2023-2026-1500)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1500 advisory. A flaw was found in ImageMagick. An integer overflow vulnerability exists in the SIXEL decoder, which allows a remote attacker to perform an out-of-bounds write via a specially crafted image...

8.1CVSS7.1AI score0.00367EPSS
SaveExploits0References34
Amazon
Amazon
•added 2026/04/01 12:00 a.m.•29 views

Important: ImageMagick

Issue Overview: A flaw was found in ImageMagick. An integer overflow vulnerability exists in the SIXEL decoder, which allows a remote attacker to perform an out-of-bounds write via a specially crafted image. This can lead to a Denial of Service DoS and potentially information disclosure...

8.1CVSS6.9AI score0.00367EPSS
SaveExploits0
osv_oesa
osv_oesa
•added 2026/03/15 7:32 a.m.•21 views

OESA-2026-1623 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

8.1CVSS6.5AI score0.00367EPSS
SaveExploits0References14
EUVD
EUVD
•added 2026/03/12 2:11 p.m.•21 views

EUVD-2026-10379

ImageMagick has heap use-after-free in the MSL encoder...

5.3CVSS6.3AI score0.00201EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/03/11 12:24 a.m.•21 views

SUSE CVE-2026-28688

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write...

5.1CVSS5.7AI score0.00201EPSS
SaveExploits0References8
osv_ubuntu
osv_ubuntu
•added 2026/03/10 7:43 a.m.•23 views

UBUNTU-CVE-2026-28688

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write...

5.3CVSS5.7AI score0.00201EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/10 12:00 a.m.•6 views

CVE-2026-28688: Use After Free

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write...

5.3CVSS5.7AI score0.00201EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/03/10 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-28688

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free...

5.3CVSS5.9AI score0.00201EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/03/09 9:38 p.m.•35 views

Use After Free

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

5.5CVSS5.8AI score0.00201EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/03/09 9:38 p.m.•11 views

CVE-2026-28688 ImageMagick has a heap use-after-free in the MSL encoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a heap-use-after-free vulnerability exists in the MSL encoder, where a cloned image is destroyed twice. The MSL coder does not support writing MSL so the write...

4CVSS5.7AI score0.00201EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/03/09 9:38 p.m.•17 views

Use After Free

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.5CVSS5.8AI score0.00201EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/03/09 9:38 p.m.•19 views

Use After Free

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.5CVSS5.8AI score0.00201EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/03/09 9:38 p.m.•39 views

Use After Free

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.5CVSS5.8AI score0.00201EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/03/09 9:38 p.m.•19 views

Use After Free

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.5CVSS5.8AI score0.00201EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/03/09 9:38 p.m.•20 views

Use After Free

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.5CVSS5.8AI score0.00201EPSS
SaveExploits0References2
Rows per page
Query Builder