Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
added 2026/07/11 7:35 p.m.9 views

CVE-2026-61857

A flaw was found in ImageMagick. This vulnerability allows a remote attacker to cause the application to crash. The issue stems from improper handling of XMP Extensible Metadata Platform profiles within image files. By crafting a malicious image with specially designed XMP data, an attacker can...

7.5CVSS6.1AI score0.00266EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/11 1:1 p.m.5 views

CVE-2026-61857

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes...

6.3CVSS6.1AI score0.00266EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2026/07/11 1:1 p.m.8 views

CVE-2026-61857

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes...

7.5CVSS6.1AI score0.00266EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/11 1:1 p.m.6 views

CVE-2026-61857 ImageMagick before 7.1.2-26 Heap Use-After-Free via XMP

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes...

6.3CVSS6.1AI score0.00266EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/04/14 6:51 p.m.3 views

EUVD-2026-22130

ImageMagick has a heap-use-after-free via XMP profile could result in a crash when printing the values...

5.5CVSS5.8AI score0.00184EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/13 9:36 p.m.7 views

CVE-2026-40311

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability that can cause a crash when reading and printing values from an invalid XMP profile. This issue has been fixed in versio...

5.5CVSS5.7AI score0.00184EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder