https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:22:58.614163+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-03168 bdu:2026-03168 2026-10-08T19:22:58.631967+00:00 bdu:2026-03168 https://cve.radiocsirt.org/vuln/euvd-2026-264655 EUVD-2026-264655 2026-10-08T19:22:58.632008+00:00 EUVD-2026-264655 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68950 fkie_cve-2025-68950 2026-10-08T19:22:58.632031+00:00

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file will be affected. Version 7.1.2-12 fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-7rvh-xqp3-pr8j GHSA-7rvh-xqp3-pr8j — ImageMagick's failure to limit MVG mutual causes Stack Overflow 2026-10-08T19:22:58.632076+00:00

Affected: NuGet: Magick.NET-Q16-AnyCPU, NuGet: Magick.NET-Q16-HDRI-AnyCPU, NuGet: Magick.NET-Q16-HDRI-OpenMP-arm64, NuGet: Magick.NET-Q16-HDRI-OpenMP-x64, NuGet: Magick.NET-Q16-HDRI-arm64, NuGet: Magick.NET-Q16-HDRI-x64, NuGet: Magick.NET-Q16-HDRI-x86, NuGet: Magick.NET-Q16-OpenMP-arm64, NuGet: Magick.NET-Q16-OpenMP-x64, NuGet: Magick.NET-Q16-arm64 and 7 more

### Summary Magick fails to check for circular references between two MVGs, leading to a stack overflow.

### Details

After reading mvg1 using Magick, the following is displayed: ``` ./magick -limit memory 2GiB -limit map 2GiB -limit disk 0 mvg:L1.mvg out.png AddressSanitizer:DEADLYSIGNAL ================================================================= ==3564123==ERROR: AddressSanitizer: UNKNOWN SIGNAL on unknown address 0x000000000000 (pc 0x5589549a4458 bp 0x7ffcc61f34a0 sp 0x7ffcc61efdd0 T0) #0 0x5589549a4458 in GetImagePixelCache MagickCore/cache.c:1726 #1 0x5589549b02c1 in QueueAuthenticPixelCacheNexus MagickCore/cache.c:4261 #2 0x5589549a2f24 in GetAuthenticPixelCacheNexus MagickCore/cache.c:1368 #3 0x5589549bae98 in GetCacheViewAuthenticPixels MagickCore/cache-view.c:311 #4 0x558954afb3a5 in DrawPolygonPrimitive._omp_fn.1 MagickCore/draw.c:5172 #5 0x7f62dd89fa15 in GOMP_parallel (/lib/x86_64-linux-gnu/libgomp.so.1+0x14a15) #6 0x558954ae0f41 in DrawPolygonPrimitive MagickCore/draw.c:5156 #7 0x558954ae5607 in DrawPrimitive MagickCore/draw.c:5875 #8 0x558954adc72d in RenderMVGContent MagickCore/draw.c:4522 #9 0x558954adcf67 in DrawImage MagickCore/draw.c:4561 #10 0x55895496cedb in RenderFreetype MagickCore/annotate.c:2065 #11 0x55895496702e in RenderType MagickCore/annotate.c:1112 #12 0x558954963da7 in AnnotateImage MagickCore/annotate.c:544 #13 0x558954ae4e0a in DrawPrimitive MagickCore/draw.c:5799 #14 0x55895…

 https://cve.radiocsirt.org/vuln/oesa-2026-1033 OESA-2026-1033 — ImageMagick security update 2026-10-08T19:22:58.632150+00:00

Affected: openEuler:20.03-LTS-SP4: ImageMagick

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves. Security Fix(es):

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, using Magick to read a malicious SVG file resulted in a DoS attack. Version 7.1.2-12 fixes the issue.(CVE-2025-68618)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file will be affected. Version 7.1.2-12 fixes the issue.(CVE-2025-68950)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, in the WriteSVGImage function, using an int variable to store number_attributes caused an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack. Version 7.1.2-12 fixes the issue.(CVE-2025-69204)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10012-1 openSUSE-SU-2026:10012-1 — ImageMagick-7.1.2.12-1.1 on GA media 2026-10-08T19:22:58.632184+00:00

ImageMagick-7.1.2.12-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:0061-1 SUSE-SU-2026:0061-1 — Security update for ImageMagick 2026-10-08T19:22:58.632202+00:00

Security update for ImageMagick

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-68950 UBUNTU-CVE-2025-68950 2026-10-08T19:22:58.632225+00:00

Affected: Ubuntu:Pro:14.04:LTS: imagemagick, Ubuntu:Pro:16.04:LTS: imagemagick, Ubuntu:Pro:18.04:LTS: imagemagick, Ubuntu:Pro:20.04:LTS: imagemagick, Ubuntu:Pro:22.04:LTS: imagemagick, Ubuntu:Pro:24.04:LTS: imagemagick, Ubuntu:25.10: imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file will be affected. Version 7.1.2-12 fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2934 WID-SEC-W-2025-2934 — ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-08T19:22:58.632267+00:00

Ein Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen.