https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:40:36.387875+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-09367 bdu:2026-09367 2026-10-03T06:40:36.532035+00:00 bdu:2026-09367 https://cve.radiocsirt.org/vuln/euvd-2026-329284 EUVD-2026-329284 2026-10-03T06:40:36.532072+00:00 EUVD-2026-329284 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25970 fkie_cve-2026-25970 2026-10-03T06:40:36.532087+00:00

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a signed integer overflow vulnerability in ImageMagick's SIXEL decoder allows an attacker to trigger memory corruption and denial of service when processing a maliciously crafted SIXEL image file. The vulnerability occurs during buffer reallocation operations where pointer arithmetic using signed 32-bit integers overflows. Versions 7.1.2-15 and 6.9.13-40 contain a patch.

 https://cve.radiocsirt.org/vuln/ghsa-xg29-8ghv-v4xr GHSA-xg29-8ghv-v4xr — ImageMagick Has Signed Integer Overflow in SIXEL Decoder, Leading to Memory Corruption 2026-10-03T06:40:36.532127+00:00

Affected: NuGet: Magick.NET-Q16-AnyCPU, NuGet: Magick.NET-Q16-HDRI-AnyCPU, NuGet: Magick.NET-Q16-HDRI-OpenMP-arm64, NuGet: Magick.NET-Q16-HDRI-arm64, NuGet: Magick.NET-Q16-HDRI-x64, NuGet: Magick.NET-Q16-HDRI-x86, NuGet: Magick.NET-Q16-OpenMP-arm64, NuGet: Magick.NET-Q16-OpenMP-x64, NuGet: Magick.NET-Q16-OpenMP-x86, NuGet: Magick.NET-Q16-arm64 and 9 more

A signed integer overflow vulnerability in ImageMagick's SIXEL decoder allows an attacker to trigger memory corruption and denial of service when processing a maliciously crafted SIXEL image file. The vulnerability occurs during buffer reallocation operations where pointer arithmetic using signed 32-bit integers overflows.

``` AddressSanitizer:DEADLYSIGNAL ================================================================= ==143838==ERROR: AddressSanitizer: UNKNOWN SIGNAL on unknown address 0x000000000000 #0 0x7f379d5adb53 (/lib/x86_64-linux-gnu/libc.so.6+0xc4b53) ```

 https://cve.radiocsirt.org/vuln/oesa-2026-1452 OESA-2026-1452 — ImageMagick security update 2026-10-03T06:40:36.532179+00:00

Affected: openEuler:24.03-LTS-SP3: ImageMagick

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves. Security Fix(es):

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap information disclosure vulnerability exists in ImageMagick's PSD (Adobe Photoshop) format handler. When processing a maliciously crafted PSD file containing ZIP-compressed layer data that decompresses to less than the expected size, uninitialized heap memory is leaked into the output image. Versions 7.1.2-15 and 6.9.13-40 contain a patch.(CVE-2026-24481)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, Magick fails to check for multi-layer nested mvg conversions to svg, leading to DoS. Versions 7.1.2-15 and 6.9.13-40 contain a patch.(CVE-2026-24484)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, when a PCD file does not contain a valid Sync marker, the DecodeImage() function becomes trapped in an infinite loop while searching for…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10267-1 openSUSE-SU-2026:10267-1 — ImageMagick-7.1.2.15-1.1 on GA media 2026-10-03T06:40:36.532264+00:00

ImageMagick-7.1.2.15-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:0852-1 SUSE-SU-2026:0852-1 — Security update for ImageMagick 2026-10-03T06:40:36.532297+00:00

Security update for ImageMagick

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-25970 UBUNTU-CVE-2026-25970 2026-10-03T06:40:36.532328+00:00

Affected: Ubuntu:Pro:16.04:LTS: imagemagick, Ubuntu:Pro:18.04:LTS: imagemagick, Ubuntu:Pro:20.04:LTS: imagemagick, Ubuntu:Pro:22.04:LTS: imagemagick, Ubuntu:Pro:24.04:LTS: imagemagick, Ubuntu:25.10: imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a signed integer overflow vulnerability in ImageMagick's SIXEL decoder allows an attacker to trigger memory corruption and denial of service when processing a maliciously crafted SIXEL image file. The vulnerability occurs during buffer reallocation operations where pointer arithmetic using signed 32-bit integers overflows. Versions 7.1.2-15 and 6.9.13-40 contain a patch.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0484 WID-SEC-W-2026-0484 — ImageMagick: Mehrere Schwachstellen 2026-10-03T06:40:36.532356+00:00

Ein Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere nicht näher definierte Angriffe durchzuführen.