Lucene search
+L

107 matches found

Cvelist
Cvelist
added 2025/08/13 2:0 p.m.20 views

CVE-2025-55154 ImageMagick: integer overflows in MNG magnification

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage in coders/png.c are unsafe and can overflow, leading to memory corruption. This issue has been patched in...

8.8CVSS0.00967EPSS
SaveExploits1References2
CVE
CVE
added 2025/08/13 2:0 p.m.70 views

CVE-2025-55154

ImageMagick vulnerability CVE-2025-55154 affects the ReadOneMNGIMage path (coders/png.c) where magnified size calculations can overflow, leading to memory corruption. This is fixed in ImageMagick releases 6.9.13-27 and 7.1.2-1. Affected products/versions should upgrade to these patched releases o...

8.8CVSS7AI score0.00967EPSS
SaveExploits1References3Affected Software1
AlpineLinux
AlpineLinux
added 2025/08/13 2:0 p.m.7 views

CVE-2025-55154

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage in coders/png.c are unsafe and can overflow, leading to memory corruption. This issue has been patched in...

8.8CVSS7.2AI score0.00967EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2025/08/13 2:0 p.m.4 views

CVE-2025-55154

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage in coders/png.c are unsafe and can overflow, leading to memory corruption. This issue has been patched in...

8.8CVSS8AI score0.00967EPSS
SaveExploits1
CVE
CVE
added 2025/08/13 1:59 p.m.182 views

CVE-2025-55004

ImageMagick before 7.1.2-1 is affected by CVE-2025-55004, a heap-buffer overflow/ read-around issue in ReadOneMNGImage when handling images with separate alpha channels during magnification. This can leak memory contents into the output image. The issue is fixed in 7.1.2-1. Affected advisories in...

7.6CVSS7.2AI score0.00522EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/13 12:0 a.m.4 views

PT-2025-32997

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.13-27 ImageMagick versions prior to 7.1.2-1 Description: ImageMagick is free and open-source software used for editing and manipulating digital images. The magnified size calculations in the ReadOneMNGImage...

10CVSS6.6AI score0.04065EPSS
SaveExploits10References82
CNNVD
CNNVD
added 2025/08/13 12:0 a.m.3 views

ImageMagick 输入验证错误漏洞

ImageMagick is ImageMagick open source suite of open source image processing software that can read, convert or write images in a variety of formats. ImageMagick suffers from an input validation error vulnerability that stems from an insecure magnification size calculation in ReadOneMNGIMage, whi...

8.8CVSS6.8AI score0.00967EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/04/08 12:0 a.m.4 views

PT-2025-32995

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.1.2-1 Description: ImageMagick is vulnerable to a heap-buffer overflow read when handling images with separate alpha channels during image magnification in the ReadOneMNGImage function. This issue can potential...

9.8CVSS6.8AI score0.04065EPSS
SaveExploits8References70
SUSE CVE
SUSE CVE
added 2023/02/15 4:42 a.m.6 views

SUSE CVE-2017-11526

The ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial of service large loop and CPU consumption via a crafted file...

6.5CVSS8.7AI score0.02915EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 4:41 a.m.6 views

SUSE CVE-2017-12673

In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service...

5.3CVSS6.6AI score0.01107EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:38 a.m.3 views

SUSE CVE-2017-15017

ImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders/png.c...

5.3CVSS9.1AI score0.02037EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:36 a.m.5 views

SUSE CVE-2017-17887

In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage...

6.5CVSS8.6AI score0.01308EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:28 a.m.3 views

SUSE CVE-2018-10177

In ImageMagick 7.0.7-28, there is an infinite loop in the ReadOneMNGImage function of the coders/png.c file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted mng file...

5.5CVSS8.6AI score0.03174EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2021/07/02 12:0 a.m.7 views

The vulnerability of the ReadOneMNGImage function in the coders/png.c component of the console image editing tool ImageMagick, related to infinite loop execution, allows a hacker to cause a service failure.

The vulnerability of the ReadOneMNGImage function in the coders/png.c component of the ImageMagick console graphics editor is related to the infinite execution of a loop. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created mng file...

6.5CVSS7AI score0.03174EPSS
SaveExploits1References10Affected Software3
OpenVAS
OpenVAS
added 2020/07/31 12:0 a.m.27 views

Huawei EulerOS: Security Advisory for ImageMagick (EulerOS-SA-2020-1806)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.9AI score0.03716EPSS
SaveExploits18References2
OSV
OSV
added 2020/07/28 12:0 a.m.4 views

OSV-2020-1404 Use-of-uninitialized-value in LosslessReduceDepthOK

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22581 Crash type: Use-of-uninitialized-value Crash state: LosslessReduceDepthOK ReadOneMNGImage ReadMNGImage...

7.2AI score
SaveExploits0
ossfuzz
ossfuzz
added 2020/06/04 4:41 p.m.17 views

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in ReadOneMNGImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=6605824029097984 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

6.8AI score
SaveExploits0Affected Software1
ossfuzz
ossfuzz
added 2020/06/02 12:4 a.m.18 views

imagemagick:ping_mvg_fuzzer: Use-of-uninitialized-value in ReadOneMNGImage

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=4848610713010176 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: pingmvgfuzzer Job Type: libfuzzermsanimagemagick Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

6.8AI score
SaveExploits0Affected Software1
OSV
OSV
added 2019/12/24 1:15 a.m.17 views

CVE-2019-19952

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage...

9.8CVSS6.6AI score
SaveExploits0References1
Prion
Prion
added 2019/12/24 1:15 a.m.16 views

Design/Logic Flaw

In ImageMagick 7.0.9-7 Q16, there is a use-after-free in the function MngInfoDiscardObject of coders/png.c, related to ReadOneMNGImage...

7.5CVSS9.3AI score0.0223EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder