CVE-2026-106567

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in...

CVE-2026-106567 ImageMagick: Infinite Loop in PSD decoder on 32-bit builds

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in...

EUVD-2026-94382

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This issue is fixed in...

CVE-2026-106567

The ImageMagick image manipulation software is vulnerable to a denial of service (DoS) attack on 32-bit builds . A crafted PSD file can trigger an integer-conversion error within the PSD decoder, leading to an infinite loop . This issue is addressed in versions 7.1.2-32 and 6.9.13-57 . No specifi...

ved-ebpf

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code...

bandiview-7.05-vuln-PoC

bandiview-7.05-vuln-PoC このリポジトリには、ファジングによって発見された Bandiview 7.05 の脆弱性に関する PoC が含まれています。 CVE-2024-45870 JXRファイル解析のDoS脆弱性 CVE-2024-45871 PSDファイル解析のDoS脆弱性 CVE-2024-45872 PSDファイル解析のスタックバッファオーバーフロー 詳細 ソフトウェア: BandiView バージョン: v7.05 2024/7/15, BuildNo=26122 クレジット JaeHo Cho @Jaecho6053 SongHyun Bae...

Astra Linux – Vulnerability in GIMP

GIMP PSD File Parsing: Heap-Based Buffer Overflow and Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability, as the target must visit a malicious page ...

psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometry

SummaryPSDImage.composite and .numpy allocate the output image buffer from the PSD's header geometry width × height × channels × depth, and per-layer rectangles before validating those values against the actual file contents. A tiny crafted PSD declaring huge dimensions causes a multi-gigabyte...

CVE-2026-103492

In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments...

EUVD-2026-90583

In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments...

CVE-2026-103492

JetBrains YouTrack versions prior to 2026.2.19422 are vulnerable to a Denial of Service (DoS) attack. The root cause is the processing of crafted PSD attachments , which can lead to high availability impact. Remediation is available in version 2026.2.19422 or later. No specific exploit details or...

CVE-2026-103492

In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments...

CVE-2026-103492

In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments...

AlmaLinux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs (ALMALINUX9.6:CLSA-2026:1787333229)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1787333229 advisory. - A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the blockrem variable, occurs when ...

AlmaLinux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1789144988)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789144988 advisory. - A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the imag...

AlmaLinux 9.2 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1789142941)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789142941 advisory. - A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the imag...

Rocky Linux 8 [CIQ] Security Update: gimp / gimp-debuginfo / gimp-debugsource / gimp-devel / etc Multiple Vulnerabilities (crlsa-2026_17533)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202617533 advisory. gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image CVE-2026-4887 gimp: GIMP: Remote Code Execution via XPM File Parsing...

Rocky Linux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1788777401)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788777401 advisory. - GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut...

AlmaLinux 9.6 [TuxCare] Security Update: gimp / gimp-devel / gimp-devel-tools / gimp-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1788777401)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788777401 advisory. - GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute...

Rocky Linux 8 [CIQ] Security Update: gimp / gimp-debuginfo / gimp-debugsource / gimp-devel / etc Multiple Vulnerabilities (crlsa-2024_0861)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20240861 advisory. gimp: PSD buffer overflow RCE CVE-2023-44442 gimp: psp off-by-one RCE CVE-2023-44444 Tenable has extracted the preceding description block directly from th...