Lucene search
+L

73 matches found

Snyk
Snyk
•added 2025/09/05 8:09 p.m.•11 views

Out-of-bounds Write

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•13 views

Out-of-bounds Write

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•12 views

Out-of-bounds Write

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•10 views

Out-of-bounds Write

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•13 views

Out-of-bounds Write

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•12 views

Out-of-bounds Write

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•10 views

Out-of-bounds Write

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•12 views

Out-of-bounds Write

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•16 views

Out-of-bounds Write

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2025/09/05 8:09 p.m.•33 views

ImageMagick BlobStream Forward-Seek Under-Allocation

Reporter: Lumina Mescuwa Product: ImageMagick 7 MagickCore Component: MagickCore/blob.c Blob I/O - BlobStream Tested: 7.1.2-0 source tag and 7.1.2-1 Homebrew, macOS arm64, clang-17, Q16-HDRI Impact: Heap out-of-bounds WRITE attacker-controlled bytes at attacker-chosen offset → memory corruption;...

9.8CVSS7.8AI score0.00294EPSS
SaveExploits1References5Affected Software12
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•10 views

Out-of-bounds Write

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
OSV
OSV
•added 2025/09/05 8:09 p.m.•4 views

GHSA-23HG-53Q6-HQFG ImageMagick BlobStream Forward-Seek Under-Allocation

Reporter: Lumina Mescuwa Product: ImageMagick 7 MagickCore Component: MagickCore/blob.c Blob I/O - BlobStream Tested: 7.1.2-0 source tag and 7.1.2-1 Homebrew, macOS arm64, clang-17, Q16-HDRI Impact: Heap out-of-bounds WRITE attacker-controlled bytes at attacker-chosen offset → memory corruption;...

3.8CVSS7.8AI score0.00294EPSS
SaveExploits1References5
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•9 views

Out-of-bounds Write

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•11 views

Out-of-bounds Write

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
Snyk
Snyk
•added 2025/09/05 8:09 p.m.•13 views

Out-of-bounds Write

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

9.8CVSS6.9AI score0.00294EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/09/05 12:00 a.m.•11 views

ImageMagick 缓冲区错误漏洞

ImageMagick is a suite of open source image processing software from ImageMagick Open Source. It can read, convert, or write images in a variety of formats. A buffer error vulnerability exists in versions of ImageMagick prior to 14.8.2, which stems from insecure SeekBlob and WriteBlob functions...

9.8CVSS6.4AI score0.00294EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/09/05 12:00 a.m.•25 views

PT-2025-36333

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 14.8.2 Description ImageMagick is free and open-source software used for editing and manipulating digital images. The software includes insecure functions: SeekBlob, which allows advancing the stream offset beyond...

10CVSS6.6AI score0.00414EPSS
SaveExploits2References89
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/05 12:00 a.m.•3 views

CVE-2025-57807: Out-of-bounds Write

ImageMagick is free and open-source software used for editing and manipulating digital images. ImageMagick versions lower than 14.8.2 include insecure functions: SeekBlob, which permits advancing the stream offset beyond the current end without increasing capacity, and WriteBlob, which then expan...

9.8CVSS5.7AI score0.00294EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2023/02/15 4:45 a.m.•14 views

SUSE CVE-2017-9142

In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of missing checks in the ReadOneJNGImage function in coders/png.c...

4CVSS8.9AI score0.02174EPSS
SaveExploits0References7
SUSE CVE
SUSE CVE
•added 2023/02/15 4:42 a.m.•11 views

SUSE CVE-2017-11524

The WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0 allows remote attackers to cause a denial of service assertion failure and application exit via a crafted file...

7.5CVSS8.7AI score0.03183EPSS
SaveExploits1References6
Rows per page
Query Builder