Lucene search
+L

589 matches found

Github Security Blog
Github Security Blog
added 2025/12/10 3:47 p.m.12 views

ImageMagick is vulnerable to an integer Overflow in TIM decoder leading to out of bounds read (32-bit only)

Summary The TIM PSX TIM image parser in ImageMagick contains a critical integer overflow vulnerability in the ReadTIMImage function coders/tim.c. The code reads width and height 16-bit values from the file header and calculates imagesize = 2 width height without checking for overflow. On 32-bit...

7.5CVSS7.4AI score0.00498EPSS
SaveExploits0References3Affected Software6
Snyk
Snyk
added 2025/12/10 3:47 p.m.2 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the ReadTIMImage function. An attacker can access sensitive memory contents by supplying a specially crafted TIM image file with large width and height values, causing an integer overflow and subsequent out-of-boun...

8.7CVSS6.9AI score0.00498EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/12/10 3:47 p.m.5 views

Out-of-bounds Read

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

8.7CVSS6.7AI score0.00498EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/12/10 3:47 p.m.5 views

Out-of-bounds Read

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6.7AI score0.00498EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 10:25 p.m.3 views

Malicious code in sonic-koig-tim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ca3f5e850d8bd5c3531b1c5d280ea40fff6a18819abc720d1774fe97c00075 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/12 10:25 p.m.6 views

Malicious code in sonic-kuloig-tim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f174f222a42f8b37195fddb3ac983ab6e184fa0e30d1e2b8aa62a6708c19549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.9AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-5752

Malware in sbrugna...

10CVSS9.1AI score0.02796EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2014-6896

Malware in sbrugna...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2007-1581

Malware in sbrugna...

10CVSS6.4AI score0.01839EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-16627

Malware in sbrugna...

10CVSS9.2AI score0.04757EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-9794

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00458EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2023-29898

Malicious code in bioql PyPI...

8.8CVSS9AI score0.00256EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2022-43135

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00646EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-29901

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00256EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2022-43523

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00622EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2024-30796

Malicious code in bioql PyPI...

7.5CVSS6.6AI score0.00297EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2025-10610

Malicious code in bioql PyPI...

5.9CVSS6.9AI score0.00384EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.12 views

EUVD-2022-50366

Malicious code in bioql PyPI...

5.9CVSS6.4AI score0.00369EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2023-28059

Malicious code in bioql PyPI...

5.9CVSS5.2AI score0.00392EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2023-38393

Malicious code in bioql PyPI...

7.8CVSS7.7AI score0.00598EPSS
SaveExploits1References1
Rows per page
Query Builder