Lucene search
+L

260 matches found

OSV
OSV
added 2026/02/24 2:16 a.m.6 views

DEBIAN-CVE-2026-25983

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted MSL script triggers a heap-use-after-free. The operation element handler replaces and frees the image while the parser continues reading from it,...

9.8CVSS7.8AI score0.00435EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/24 2:16 a.m.6 views

DEBIAN-CVE-2026-25968

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a stack buffer overflow occurs when processing the an attribute in msl.c. A long value overflows a fixed-size stack buffer, leading to memory corruption. Versio...

9.8CVSS7.7AI score0.00272EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/24 2:16 a.m.17 views

UBUNTU-CVE-2026-25983

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted MSL script triggers a heap-use-after-free. The operation element handler replaces and frees the image while the parser continues reading from it,...

9.8CVSS5.8AI score0.00435EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/02/24 2:01 a.m.4 views

CVE-2026-26983 ImageMagick: Invalid MSL <map> can result in a use after free

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the MSL interpreter crashes when processing a invalid element that causes it to use an image after it has been freed. Versions 7.1.2-15 and 6.9.13-40 contain a...

5.3CVSS5.8AI score0.0045EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/24 2:01 a.m.14 views

CVE-2026-26983

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the MSL interpreter crashes when processing a invalid element that causes it to use an image after it has been freed. Versions 7.1.2-15 and 6.9.13-40 contain a...

5.3CVSS5.3AI score0.0045EPSS
SaveExploits0References2Affected Software1
Snyk
Snyk
added 2026/02/24 2:01 a.m.9 views

Expired Pointer Dereference

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.6AI score0.0045EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 2:01 a.m.10 views

Expired Pointer Dereference

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.6AI score0.0045EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 2:01 a.m.10 views

Expired Pointer Dereference

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.9CVSS5.6AI score0.0045EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 2:01 a.m.10 views

Expired Pointer Dereference

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.6AI score0.0045EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 2:01 a.m.11 views

Expired Pointer Dereference

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.9CVSS6AI score0.0045EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 2:01 a.m.13 views

Expired Pointer Dereference

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.6AI score0.0045EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/02/24 2:01 a.m.46 views

CVE-2026-26983 ImageMagick: Invalid MSL <map> can result in a use after free

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the MSL interpreter crashes when processing a invalid element that causes it to use an image after it has been freed. Versions 7.1.2-15 and 6.9.13-40 contain a...

5.3CVSS0.0045EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/02/24 2:01 a.m.9 views

Expired Pointer Dereference

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.6AI score0.0045EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 2:01 a.m.5 views

Expired Pointer Dereference

Overview Affected versions of this package are vulnerable to Expired Pointer Dereference in the MSL interpreter. An attacker can cause the application to crash by submitting an image file containing a malicious MSL element. Remediation A fix was pushed into the master branch but not yet published...

6.9CVSS5.6AI score0.0045EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 2:01 a.m.10 views

Expired Pointer Dereference

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS6AI score0.0045EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 2:01 a.m.7 views

Expired Pointer Dereference

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.9CVSS5.6AI score0.0045EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/24 1:48 a.m.61 views

CVE-2026-25988

CVE-2026-25988 affects ImageMagick. The issue is a memory leak caused by a defect in the MSL code path: msl.c can fail to update the stack index, causing an image to be stored in a wrong slot and never freed on error. Vendor advisories confirm patches exist in versions 7.1.2-15 and 6.9.13-40, wit...

7.5CVSS5.4AI score0.00438EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
added 2026/02/24 1:41 a.m.11 views

Expired Pointer Dereference

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS5.6AI score0.00435EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 1:41 a.m.9 views

Expired Pointer Dereference

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS5.6AI score0.00435EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/24 1:41 a.m.5 views

Expired Pointer Dereference

Overview Affected versions of this package are vulnerable to Expired Pointer Dereference in ReadBlobString, when handling MSL scripts. An attacker can cause a denial of service by submitting malicious MSL input that triggers a heap-use-after-free condition. Remediation A fix was pushed into the...

9.8CVSS5.6AI score0.00435EPSS
SaveExploits0References2
Rows per page
Query Builder