Lucene search
K

39 matches found

OSV
OSV
added 2026/05/20 7:14 a.m.3 views

SUSE-SU-2026:2022-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues - CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images bsc1259528. - CVE-2026-42050: Stack buffer overflow in XTileImage bsc1265048...

5.7CVSS6AI score0.0013EPSS
Exploits0References5
OSV
OSV
added 2026/05/20 7:14 a.m.4 views

SUSE-SU-2026:2021-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues - CVE-2026-31853: heap buffer overflow leads to crash in the SFW decoder of 32-bit systems when processing extremely large images bsc1259528. - CVE-2026-42050: Stack buffer overflow in XTileImage bsc1265048...

5.7CVSS6AI score0.0013EPSS
Exploits0References5
OPENSUSE Linux
OPENSUSE Linux
added 2026/05/19 12:0 a.m.9 views

Security update for ImageMagick (important)

openSUSE security update: security update for imagemagick ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20747-1 Rating: important References: bsc1259528 Cross-References: CVE-2026-31853 CVSS scores: CVE-2026-31853 SUSE : 8.6...

8.6CVSS5.9AI score0.00093EPSS
Exploits0References1
OSV
OSV
added 2026/04/14 3:5 p.m.8 views

CLSA-2026-1776179155 Fix of 8 CVEs

SECURITY UPDATE: fix division by zero in YUV coder - debian/patches/CVE-2026-25799.patch: fix division by zero in YUV coder - CVE-2026-25799 SECURITY UPDATE: fix NULL pointer dereference in SFW coder - debian/patches/CVE-2026-25795.patch: fix NULL pointer dereference in SFW coder - CVE-2026-25795...

7.5CVSS6.6AI score0.00429EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/12 2:24 p.m.5 views

CVE-2026-31853

A flaw was found in ImageMagick. An overflow on 32-bit systems in the SFW decoder can lead to a crash when processing extremely large images. This vulnerability could allow an attacker to cause a Denial of Service DoS by providing a specially crafted large image. Mitigation Red Hat is not aware o...

5.7CVSS5.8AI score0.00093EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2026/03/12 8:52 a.m.3 views

SUSE CVE-2026-31853

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

8.6CVSS5.9AI score0.00093EPSS
Exploits0References13
OSV
OSV
added 2026/03/11 5:16 p.m.3 views

DEBIAN-CVE-2026-31853

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

5.5CVSS5.3AI score0.00093EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/11 5:9 p.m.2 views

CVE-2026-31853 ImageMagick has a heap buffer over-write on 32-bit systems in SFW decoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

5.7CVSS5.8AI score0.00093EPSS
Exploits0References1
CVE
CVE
added 2026/03/11 5:9 p.m.163 views

CVE-2026-31853

ImageMagick vulnerability CVE-2026-31853 involves a 32-bit overflow in the SFW decoder when handling extremely large images, causing a crash. Affected software versions are prior to 7.1.2-16 and 6.9.13-41. The issue is fixed in 7.1.2-16 and 6.9.13-41. Upgrade ImageMagick to those versions (or lat...

5.7CVSS5.8AI score0.00093EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/03/11 5:9 p.m.30 views

CVE-2026-31853 ImageMagick has a heap buffer over-write on 32-bit systems in SFW decoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

5.7CVSS0.00093EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2026/03/11 5:9 p.m.3 views

CVE-2026-31853

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

5.7CVSS5.3AI score0.00093EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2026/03/11 5:9 p.m.2 views

CVE-2026-31853

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...

5.7CVSS5.9AI score0.00093EPSS
Exploits0
Snyk
Snyk
added 2026/03/10 9:5 p.m.5 views

Heap-based Buffer Overflow

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.6CVSS5.9AI score0.00093EPSS
Exploits0References2
Snyk
Snyk
added 2026/03/10 9:5 p.m.6 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

8.6CVSS5.9AI score0.00093EPSS
Exploits0References2
Snyk
Snyk
added 2026/03/10 9:5 p.m.10 views

Heap-based Buffer Overflow

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.6CVSS5.9AI score0.00093EPSS
Exploits0References2
Snyk
Snyk
added 2026/03/10 9:5 p.m.11 views

Heap-based Buffer Overflow

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.6CVSS5.9AI score0.00093EPSS
Exploits0References2
OSV
OSV
added 2026/02/24 3:32 p.m.6 views

GHSA-P33R-FQW2-RQMM ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)

In ReadSFWImage coders/sfw.c, when temporary file creation fails, readinfo is destroyed before its filename member is accessed, causing a NULL pointer dereference and crash. AddressSanitizer:DEADLYSIGNAL ================================================================= ==1414421==ERROR:...

5.3CVSS5.4AI score0.00376EPSS
Exploits0References6
Snyk
Snyk
added 2026/02/24 12:54 a.m.3 views

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in handling SFW image files, when temporary file creation fails. An attacker can cause the application to crash by submitting a malicious SFW image file. Remediation A fix was pushed into the master branch but n...

8.2CVSS5.5AI score0.00376EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 12:54 a.m.6 views

NULL Pointer Dereference

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.2CVSS6AI score0.00376EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 12:54 a.m.5 views

NULL Pointer Dereference

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.2CVSS6AI score0.00376EPSS
Exploits0References2
Rows per page
Query Builder