Lucene search
+L

139 matches found

Github Security Blog
Github Security Blog
added 2026/03/12 2:4 p.m.8 views

ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.

The pcd coder lacks proper boundary checking when processing Huffman-coded data. The decoder contains an function that has an incorrect initialization that could cause an out of bounds read. ==3900053==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x502000003c6c at pc 0x55601b9cc552 bp...

9.1CVSS5.8AI score0.00404EPSS
SaveExploits0References4Affected Software19
Tenable Nessus
Tenable Nessus
added 2026/03/11 12:0 a.m.11 views

openSUSE 16 Security Update : ImageMagick (openSUSE-SU-2026:20337-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20337-1 advisory. - CVE-2026-22770: improper pointer initialization can cause denial of service bsc1256969. - CVE-2026-23874: manipulation of digital images can...

9.8CVSS6.1AI score0.00671EPSS
SaveExploits3References114
OSV
OSV
added 2026/03/09 3:34 p.m.4 views

SUSE-SU-2026:0854-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion bsc1258790. - CVE-2026-24485: denial of service via malformed PCD file processing bsc1258791. - CVE-2026-25576: Out of bounds read in multiple...

9.8CVSS5.8AI score0.0045EPSS
SaveExploits0References31
OSV
OSV
added 2026/03/09 3:32 p.m.3 views

SUSE-SU-2026:0852-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression bsc1258743. - CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion bsc1258790. - CVE-2026-24485: denial of service via...

9.8CVSS6AI score0.00671EPSS
SaveExploits0References63
Tenable Nessus
Tenable Nessus
added 2026/03/06 12:0 a.m.6 views

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : ImageMagick vulnerabilities (USN-8069-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8069-1 advisory. It was discovered that ImageMagick did not properly decode certain SUN image files. An attack...

9.8CVSS7.4AI score0.00461EPSS
SaveExploits0References8
Ubuntu
Ubuntu
added 2026/03/04 12:11 p.m.10 views

USN-8069-1: ImageMagick vulnerabilities

It was discovered that ImageMagick did not properly decode certain SUN image files. An attacker could use this issue to cause ImageMagick to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2026-25897 It was discovered that ImageMagick did not properly validate pix...

9.8CVSS6.2AI score0.00461EPSS
SaveExploits0
OSV
OSV
added 2026/03/04 12:11 p.m.10 views

USN-8069-1 imagemagick vulnerabilities

It was discovered that ImageMagick did not properly decode certain SUN image files. An attacker could use this issue to cause ImageMagick to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2026-25897 It was discovered that ImageMagick did not properly validate pix...

9.8CVSS6AI score0.00461EPSS
SaveExploits0References8
OSV
OSV
added 2026/03/02 3:8 p.m.8 views

CLSA-2026-1772464109 Fix CVE(s): CVE-2026-25897, CVE-2026-26284

SECURITY UPDATE: security vulnerability CVE-2026-25897 - debian/patches/CVE-2026-25897.patch: prevent integer overflow during pixel buffer size calculation by using checked multiplication and validating rows addition; issue caused by unvalidated header values allowing overflow and incorrect...

9.8CVSS7.4AI score0.00404EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/28 12:45 p.m.11 views

OESA-2026-1457 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

9.8CVSS6.7AI score0.00671EPSS
SaveExploits0References32
OSV
OSV
added 2026/02/28 12:45 p.m.14 views

OESA-2026-1455 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

9.8CVSS6.7AI score0.00671EPSS
SaveExploits0References32
OSV
OSV
added 2026/02/28 12:45 p.m.13 views

OESA-2026-1453 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

9.8CVSS6.7AI score0.00671EPSS
SaveExploits0References31
OSV
OSV
added 2026/02/28 12:44 p.m.10 views

OESA-2026-1452 ImageMagick security update

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats over 200 including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images,...

9.8CVSS6.7AI score0.00671EPSS
SaveExploits0References32
Tenable Nessus
Tenable Nessus
added 2026/02/26 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-24485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does no...

7.5CVSS7.2AI score0.00449EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/02/25 7:12 p.m.9 views

Out-of-bounds Read

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

6.3CVSS6AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/25 7:12 p.m.10 views

Out-of-bounds Read

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS6AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/25 7:12 p.m.11 views

Out-of-bounds Read

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

6.3CVSS6AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/25 7:12 p.m.9 views

Out-of-bounds Read

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS6AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/25 7:12 p.m.9 views

Out-of-bounds Read

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.3CVSS6AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/25 7:12 p.m.8 views

Out-of-bounds Read

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

6.3CVSS6AI score
SaveExploits0References2
Snyk
Snyk
added 2026/02/25 7:12 p.m.7 views

Out-of-bounds Read

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.3CVSS6AI score
SaveExploits0References2
Rows per page
Query Builder