Lucene search
+L

9122 matches found

Github Security Blog
Github Security Blog
•added 2026/04/14 11:32 p.m.•16 views

ImageMagick has a heap buffer overflow read in magnify operation via unrecognized magnify:method value

An unrecognized magnify:method will result in an out of bounds read in the magnify operation. ==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x61a000000b30 READ of size 4 at 0x61a000000b30 thread T0...

5.8AI score
SaveExploits0References2Affected Software18
OSV
OSV
•added 2026/04/14 11:16 p.m.•11 views

DEBIAN-CVE-2026-33021

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain a use-after-free vulnerability in sixelencoderencodebytes because sixelframeinit stores the caller-owned pixel buffer pointer directly in frame-pixels without making a defensive copy...

7.3CVSS6.4AI score0.00211EPSS
SaveExploits1References1
NVD
NVD
•added 2026/04/14 11:16 p.m.•33 views

CVE-2026-33021

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain a use-after-free vulnerability in sixelencoderencodebytes because sixelframeinit stores the caller-owned pixel buffer pointer directly in frame-pixels without making a defensive copy...

7.3CVSS0.00211EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2026/04/14 11:16 p.m.•15 views

CVE-2026-33021

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain a use-after-free vulnerability in sixelencoderencodebytes because sixelframeinit stores the caller-owned pixel buffer pointer directly in frame-pixels without making a defensive copy...

7.3CVSS5.9AI score0.00211EPSS
SaveExploits1References3
OSV
OSV
•added 2026/04/14 11:16 p.m.•24 views

UBUNTU-CVE-2026-33021

libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. Versions 1.8.7 and prior contain a use-after-free vulnerability in sixelencoderencodebytes because sixelframeinit stores the caller-owned pixel buffer pointer directly in frame-pixels without making a defensive copy...

7.3CVSS6AI score0.00211EPSS
SaveExploits1References4
CVE
CVE
•added 2026/04/14 9:57 p.m.•39 views

CVE-2026-33021

CVE-2026-33021 (libsixel) is a use-after-free in sixel_encoder_encode_bytes() affecting libsixel 1.8.7 and earlier. The bug arises because sixel_frame_init() stores a caller-owned pixel buffer pointer directly in frame->pixels without copying. On a subsequent resize, sixel_frame_convert_to_rgb...

7.3CVSS6.4AI score0.00211EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2026/04/14 6:49 p.m.•16 views

GHSA-PCVX-PH33-R5VV ImageMagick has an out-of-bounds read in sample operation

The -sample operation has an out of bounds read when an specific offset is set through the sample:offset define that could lead to an out of bounds read...

5.5CVSS6.5AI score0.00201EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2026/04/14 6:49 p.m.•18 views

ImageMagick has an out-of-bounds read in sample operation

The -sample operation has an out of bounds read when an specific offset is set through the sample:offset define that could lead to an out of bounds read...

7.1CVSS6.5AI score0.00201EPSS
SaveExploits0References6Affected Software17
Cvelist
Cvelist
•added 2026/04/14 12:06 a.m.•43 views

CVE-2026-27673 Missing Authorization Check in SAP S/4HANA (Private Cloud and On-Premise)

Due to a missing authorization check, SAP S/4HANA Private Cloud and On-Premise allows an authenticated user to delete files on the operating system and gain unauthorized control over file operations which could leads to no impact on Confidentiality, Low impact on Integrity and Availability of the...

4.9CVSS0.00252EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•14 views

The vulnerability of the NOOP Command Handler component of the Freefloat FTP Server allows a hacker to execute arbitrary commands.

The vulnerability of the NOOP Command Handler component in the Freefloat FTP Server lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS7.4AI score0.14985EPSS
SaveExploits15References5Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/04/14 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-34238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, an integer overflo...

5.5CVSS5.9AI score0.00148EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/13 10:16 p.m.•12 views

CVE-2026-33947

jq is a command-line JSON processor. In versions 1.8.1 and below, functions jvsetpath, jvgetpath, and delpathssorted in jq's src/jvaux.c use unbounded recursion whose depth is controlled by the length of a caller-supplied path array, with no depth limit enforced. An attacker can supply a JSON...

6.2CVSS0.00176EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2026/04/13 10:16 p.m.•13 views

CVE-2026-33905

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the -sample operation has an out of bounds read when an specific offset is set through the sample:offset define that could lead to an out of bounds read...

7.1CVSS6.1AI score0.00201EPSS
SaveExploits0References9
OSV
OSV
•added 2026/04/13 10:16 p.m.•14 views

UBUNTU-CVE-2026-33905

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the -sample operation has an out of bounds read when an specific offset is set through the sample:offset define that could lead to an out of bounds read...

7.1CVSS6.2AI score0.00201EPSS
SaveExploits0References10
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•16 views

Integer Overflow or Wraparound

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.9CVSS6.1AI score0.00148EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•17 views

Integer Overflow or Wraparound

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.9CVSS6.1AI score0.00148EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•17 views

Integer Overflow or Wraparound

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.9CVSS6.1AI score0.00148EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•36 views

Integer Overflow or Wraparound

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.9CVSS6.1AI score0.00148EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•16 views

Out-of-bounds Read

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

7.1CVSS6.2AI score0.00201EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/04/13 10:11 p.m.•13 views

Out-of-bounds Read

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

7.1CVSS6.2AI score0.00201EPSS
SaveExploits0References2
Rows per page
Query Builder