Lucene search
K

681 matches found

Github Security Blog
Github Security Blog
added 2026/01/21 1:5 a.m.5 views

ImageMagick MSL: Stack overflow via infinite recursion in ProcessMSLScript

Summary Stack overflow via infinite recursion in MSL Magick Scripting Language command when writing to MSL format. Version - ImageMagick 7.x tested on current main branch - Commit: HEAD - Requires: libxml2 support for MSL parsing Steps to Reproduce Method 1: Using ImageMagick directly bash magick...

5.5CVSS5.5AI score0.00025EPSS
Exploits1References4Affected Software18
SUSE CVE
SUSE CVE
added 2026/01/21 12:20 a.m.2 views

SUSE CVE-2026-23874

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL Magick Scripting Language command when writing to MSL format. Version 7.1.2-13 fixes the issue...

5.5CVSS5.6AI score0.00025EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2026/01/20 3:46 a.m.2 views

CVE-2026-23874

A flaw was found in ImageMagick. A local user could exploit this vulnerability by providing a specially crafted Magick Scripting Language MSL file. This file, when processed, could trigger infinite recursion within the command, leading to a stack overflow. Successful exploitation results in a...

5.5CVSS5.5AI score0.00025EPSS
Exploits1References4
NVD
NVD
added 2026/01/20 1:15 a.m.3 views

CVE-2026-23874

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL Magick Scripting Language command when writing to MSL format. Version 7.1.2-13 fixes the issue...

5.5CVSS0.00025EPSS
Exploits1References1
OSV
OSV
added 2026/01/20 1:15 a.m.1 views

DEBIAN-CVE-2026-23874

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL Magick Scripting Language command when writing to MSL format. Version 7.1.2-13 fixes the issue...

5.5CVSS5.4AI score0.00025EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2026/01/20 1:15 a.m.1 views

CVE-2026-23874

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL Magick Scripting Language command when writing to MSL format. Version 7.1.2-13 fixes the issue...

5.5CVSS5.9AI score0.00025EPSS
Exploits1References2
OSV
OSV
added 2026/01/20 1:15 a.m.0 views

UBUNTU-CVE-2026-23874

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL Magick Scripting Language command when writing to MSL format. Version 7.1.2-13 fixes the issue...

5.5CVSS5.9AI score0.00025EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/01/20 12:52 a.m.1 views

CVE-2026-23874

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL Magick Scripting Language command when writing to MSL format. Version 7.1.2-13 fixes the issue...

5.5CVSS5.5AI score0.00025EPSS
Exploits1References2Affected Software1
Snyk
Snyk
added 2026/01/20 12:52 a.m.1 views

Infinite loop

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.8CVSS5.7AI score0.00025EPSS
Exploits1References2
Snyk
Snyk
added 2026/01/20 12:52 a.m.1 views

Infinite loop

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

6.8CVSS5.7AI score0.00025EPSS
Exploits1References2
Snyk
Snyk
added 2026/01/20 12:52 a.m.1 views

Infinite loop

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.7AI score0.00025EPSS
Exploits1References2
Snyk
Snyk
added 2026/01/20 12:52 a.m.1 views

Infinite loop

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

6.8CVSS5.7AI score0.00025EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/01/20 12:52 a.m.17 views

CVE-2026-23874 ImageMagick's MSL: Stack overflow via infinite recursion in ProcessMSLScript

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL Magick Scripting Language command when writing to MSL format. Version 7.1.2-13 fixes the issue...

5.5CVSS0.00025EPSS
Exploits1References1
AlpineLinux
AlpineLinux
added 2026/01/20 12:52 a.m.2 views

CVE-2026-23874

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-13 have a stack overflow via infinite recursion in MSL Magick Scripting Language command when writing to MSL format. Version 7.1.2-13 fixes the issue...

5.5CVSS5.6AI score0.00025EPSS
Exploits1References1
Snyk
Snyk
added 2026/01/20 12:52 a.m.3 views

Infinite loop

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

6.8CVSS5.7AI score0.00025EPSS
Exploits1References2
Snyk
Snyk
added 2026/01/20 12:52 a.m.1 views

Infinite loop

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.7AI score0.00025EPSS
Exploits1References2
Snyk
Snyk
added 2026/01/20 12:52 a.m.1 views

Infinite loop

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.7AI score0.00025EPSS
Exploits1References2
Snyk
Snyk
added 2026/01/20 12:52 a.m.2 views

Infinite loop

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.7AI score0.00025EPSS
Exploits1References2
Snyk
Snyk
added 2026/01/20 12:52 a.m.1 views

Infinite loop

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.7AI score0.00025EPSS
Exploits1References2
Snyk
Snyk
added 2026/01/20 12:52 a.m.1 views

Infinite loop

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

6.8CVSS5.7AI score0.00025EPSS
Exploits1References2
Rows per page
Query Builder