Lucene search
K

26 matches found

OSV
OSV
added 2026/02/24 3:34 p.m.2 views

GHSA-RW6C-XP26-225V ImageMagick: Code Injection via PostScript header in ps coders

The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer like Ghostscript, the...

5.7CVSS5.9AI score0.0001EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2026/02/24 3:34 p.m.4 views

ImageMagick: Code Injection via PostScript header in ps coders

The ps encoders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a malicious file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer like Ghostscript, the...

5.7CVSS5.7AI score0.0001EPSS
Exploits0References5Affected Software18
NVD
NVD
added 2026/02/24 1:16 a.m.2 views

CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS0.0001EPSS
Exploits0References1
OSV
OSV
added 2026/02/24 1:16 a.m.1 views

UBUNTU-CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS6AI score0.0001EPSS
Exploits0References4
Snyk
Snyk
added 2026/02/24 1:1 a.m.1 views

Arbitrary Code Injection

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.7CVSS6.2AI score0.0001EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 1:1 a.m.0 views

Arbitrary Code Injection

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.7CVSS6.2AI score0.0001EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 1:1 a.m.3 views

Arbitrary Code Injection

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.7CVSS6.2AI score0.0001EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 1:1 a.m.0 views

Arbitrary Code Injection

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.7CVSS6.2AI score0.0001EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/24 1:1 a.m.2 views

CVE-2026-25797 ImageMagick vulnerable to Code injection via PostScript header in ps coders

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS6.1AI score0.0001EPSS
Exploits0References1
Snyk
Snyk
added 2026/02/24 1:1 a.m.1 views

Arbitrary Code Injection

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.7CVSS6.2AI score0.0001EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/02/24 1:1 a.m.2 views

CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS8.1AI score0.0001EPSS
Exploits0
Snyk
Snyk
added 2026/02/24 1:1 a.m.0 views

Arbitrary Code Injection

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

5.7CVSS6.2AI score0.0001EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 1:1 a.m.0 views

Arbitrary Code Injection

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.7CVSS6.2AI score0.0001EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 1:1 a.m.1 views

Arbitrary Code Injection

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.7CVSS6.2AI score0.0001EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 1:1 a.m.1 views

Arbitrary Code Injection

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.7CVSS6.2AI score0.0001EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2026/02/24 1:1 a.m.1 views

CVE-2026-25797

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...

5.7CVSS5.9AI score0.0001EPSS
Exploits0
CVE
CVE
added 2026/02/24 1:1 a.m.9 views

CVE-2026-25797

ImageMagick (affected: 7.1.2-15 and 6.9.13-40) contains two input-sanitization issues in the PostScript header written by the ps coders and in HTML escaping when writing to documents. The ps coders fail to sanitize input before inserting into the PostScript header, allowing an attacker to craft a...

5.7CVSS5.7AI score0.0001EPSS
Exploits0References1Affected Software1
Snyk
Snyk
added 2026/02/24 1:1 a.m.1 views

Arbitrary Code Injection

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.7CVSS6.2AI score0.0001EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 1:1 a.m.1 views

Arbitrary Code Injection

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

5.7CVSS6.2AI score0.0001EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 1:1 a.m.1 views

Arbitrary Code Injection

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

5.7CVSS6.2AI score0.0001EPSS
Exploits0References2
Rows per page
Query Builder