Search Results (863 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-107210 1 Imagemagick 1 Imagemagick 2026-10-10 5.3 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit, bypassing resource restrictions and consuming excessive disk space. This issue is fixed in versions 7.1.2-30 and 6.9.13-55.
CVE-2026-106578 1 Imagemagick 1 Imagemagick 2026-10-10 5.9 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.
CVE-2026-106573 1 Imagemagick 1 Imagemagick 2026-10-10 5.3 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long-running operation. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.
CVE-2026-106568 1 Imagemagick 1 Imagemagick 2026-10-10 5.3 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop, preventing image processing from completing. This issue is fixed in versions 7.1.2-32 and 6.9.13-57.
CVE-2026-105827 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105826 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105825 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105824 1 Imagemagick 1 Imagemagick 2026-10-09 5.9 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105823 1 Imagemagick 1 Imagemagick 2026-10-09 4.0 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105405 1 Imagemagick 1 Imagemagick 2026-10-09 5.9 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105404 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105403 1 Imagemagick 1 Imagemagick 2026-10-09 6.2 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105402 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105401 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105400 1 Imagemagick 1 Imagemagick 2026-10-09 3.3 Low
This CVE ID has been rejected as a duplicate.
CVE-2026-105399 1 Imagemagick 1 Imagemagick 2026-10-09 5.3 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-105398 1 Imagemagick 1 Imagemagick 2026-10-09 5.1 Medium
This CVE ID has been rejected as a duplicate.
CVE-2026-107208 1 Imagemagick 1 Imagemagick 2026-10-07 5.3 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processing process. This issue is fixed in versions 7.1.2-30 and 6.9.13-55.
CVE-2026-106566 1 Imagemagick 1 Imagemagick 2026-10-07 4 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICK_SHRED_PASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. This issue is fixed in version 7.1.2-32.
CVE-2026-106571 1 Imagemagick 1 Imagemagick 2026-10-07 5.1 Medium
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process. This issue is fixed in versions 6.9.13-56 and 7.1.2-31.