https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:33:15.714373+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-10840 bdu:2026-10840 2026-10-02T15:33:15.836522+00:00 bdu:2026-10840 https://cve.radiocsirt.org/vuln/euvd-2026-330199 EUVD-2026-330199 2026-10-02T15:33:15.836589+00:00 EUVD-2026-330199 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56370 fkie_cve-2026-56370 2026-10-02T15:33:15.836616+00:00

ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in ConnectedComponentsImage() when processing connected-components artifacts with invalid indices. Attackers can trigger access violations by specifying malformed connected-components definitions via CLI, causing denial of service or potential code execution.

 https://cve.radiocsirt.org/vuln/ghsa-pmpg-6pww-fg6q GHSA-pmpg-6pww-fg6q — ImageMagick has out-of-bounds access in ConnectedComponentsImage() via CLI-controlled connected-components:* artifacts 2026-10-02T15:33:15.836661+00:00

Affected: NuGet: Magick.NET-Q16-AnyCPU, NuGet: Magick.NET-Q16-HDRI-AnyCPU, NuGet: Magick.NET-Q16-HDRI-OpenMP-arm64, NuGet: Magick.NET-Q16-HDRI-arm64, NuGet: Magick.NET-Q16-HDRI-x64, NuGet: Magick.NET-Q16-HDRI-x86, NuGet: Magick.NET-Q16-OpenMP-arm64, NuGet: Magick.NET-Q16-OpenMP-x64, NuGet: Magick.NET-Q16-arm64, NuGet: Magick.NET-Q16-x64 and 8 more

When the `connected-components:*` define specifies an invalid index and out of bound operation will result in an access violation.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11127-1 openSUSE-SU-2026:11127-1 — ImageMagick-7.1.2.25-3.1 on GA media 2026-10-02T15:33:15.836749+00:00

ImageMagick-7.1.2.25-3.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:22378-1 SUSE-SU-2026:22378-1 — Security update for ImageMagick 2026-10-02T15:33:15.836794+00:00

Security update for ImageMagick

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56370 UBUNTU-CVE-2026-56370 2026-10-02T15:33:15.836852+00:00

Affected: Ubuntu:Pro:22.04:LTS: imagemagick, Ubuntu:Pro:24.04:LTS: imagemagick, Ubuntu:25.10: imagemagick, Ubuntu:Pro:26.04:LTS: imagemagick

ImageMagick before 7.1.2-19 contains an out-of-bounds access vulnerability in ConnectedComponentsImage() when processing connected-components artifacts with invalid indices. Attackers can trigger access violations by specifying malformed connected-components definitions via CLI, causing denial of service or potential code execution.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1126 WID-SEC-W-2026-1126 — ImageMagick: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-02T15:33:15.836899+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen.