Lucene search
K

61 matches found

SUSE CVE
SUSE CVE
added 2026/05/20 2:40 a.m.6 views

SUSE CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

4.2CVSS6.5AI score0.00073EPSS
Exploits1References7
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS5.5AI score0.00073EPSS
Exploits1References2
OSV
OSV
added 2026/04/08 9:19 p.m.3 views

CLSA-2026-1775683193 ImageMagick: Fix of CVE-2025-57807

CVE-2025-57807: heap buffer overflow in WriteBlobStream and WriteBlob via incorrect extent calculation when offset exceeds current capacity...

9.8CVSS6AI score0.00073EPSS
Exploits1References1
Redos
Redos
added 2025/10/30 12:0 a.m.1 views

ROS-20251030-08

The vulnerability of SeekBlob and WriteBlob functions of ImageMagick console graphic editor is related to writing outside of buffer boundaries. Exploitation of the vulnerability could allow a remote attacker, execute arbitrary code...

9.8CVSS7.6AI score0.00073EPSS
Exploits1
Redos
Redos
added 2025/10/30 12:0 a.m.1 views

ROS-20251030-07

The vulnerability of SeekBlob and WriteBlob functions of ImageMagick console graphic editor is related to writing outside of buffer boundaries. Exploitation of the vulnerability could allow a remote attacker, execute arbitrary code...

9.8CVSS7.6AI score0.00073EPSS
Exploits1
Veracode
Veracode
added 2025/10/13 6:32 a.m.5 views

Heap-based Buffer Overflow

ImageMagick is vulnerable to a heap-based buffer overflow. The vulnerability is due to improper memory handling in the SeekBlob and WriteBlob functions, which allows an attacker to write data beyond allocated memory, potentially leading to arbitrary code execution or application crashes...

9.8CVSS8.1AI score0.00073EPSS
Exploits1References5Affected Software12
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-3140

Malware in sbrugna...

6.5CVSS7.3AI score0.00685EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-27126

Malicious code in bioql PyPI...

9.8CVSS6.2AI score0.00073EPSS
Exploits1References2
OSV
OSV
added 2025/09/23 1:48 p.m.1 views

CLSA-2025-1758635329 Fix CVE(s): CVE-2025-57807

SECURITY UPDATE: heap out-of-bounds write in BlobStream WriteBlob - debian/patches/CVE-2025-57807.patch: enforce extent ≥ offset + length when forward-seeking before writes in MagickCore/blob.c - CVE-2025-57807...

9.8CVSS0.00073EPSS
Exploits1References1
NVD
NVD
added 2025/09/05 10:15 p.m.3 views

CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS0.00073EPSS
Exploits1References3
OSV
OSV
added 2025/09/05 10:15 p.m.0 views

UBUNTU-CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS5.8AI score0.00073EPSS
Exploits1References7
AlpineLinux
AlpineLinux
added 2025/09/05 9:16 p.m.1 views

CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS6.8AI score0.00073EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/09/05 9:16 p.m.4 views

CVE-2025-57807 ImageMagick BlobStream Forward-Seek Under-Allocation

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

3.8CVSS0.00073EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2025/09/05 9:16 p.m.2 views

CVE-2025-57807

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS4.9AI score0.00073EPSS
Exploits1
Snyk
Snyk
added 2025/09/05 8:9 p.m.1 views

Out-of-bounds Write

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

9.8CVSS6.9AI score0.00073EPSS
Exploits1References4
Snyk
Snyk
added 2025/09/05 8:9 p.m.0 views

Out-of-bounds Write

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.9AI score0.00073EPSS
Exploits1References4
OSV
OSV
added 2025/09/05 8:9 p.m.1 views

GHSA-23HG-53Q6-HQFG ImageMagick BlobStream Forward-Seek Under-Allocation

Reporter: Lumina Mescuwa Product: ImageMagick 7 MagickCore Component: MagickCore/blob.c Blob I/O - BlobStream Tested: 7.1.2-0 source tag and 7.1.2-1 Homebrew, macOS arm64, clang-17, Q16-HDRI Impact: Heap out-of-bounds WRITE attacker-controlled bytes at attacker-chosen offset → memory corruption;...

3.8CVSS7.8AI score0.00073EPSS
Exploits1References5
Snyk
Snyk
added 2025/09/05 8:9 p.m.1 views

Out-of-bounds Write

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.9AI score0.00073EPSS
Exploits1References4
Snyk
Snyk
added 2025/09/05 8:9 p.m.1 views

Out-of-bounds Write

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.9AI score0.00073EPSS
Exploits1References4
Snyk
Snyk
added 2025/09/05 8:9 p.m.1 views

Out-of-bounds Write

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

9.8CVSS6.9AI score0.00073EPSS
Exploits1References4
Rows per page
Query Builder