https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:30:03.437221+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-09990 bdu:2026-09990 2026-10-04T11:30:03.629938+00:00 bdu:2026-09990 https://cve.radiocsirt.org/vuln/euvd-2026-337182 EUVD-2026-337182 2026-10-04T11:30:03.629990+00:00 EUVD-2026-337182 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56379 fkie_cve-2026-56379 2026-10-04T11:30:03.630005+00:00

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering.

 https://cve.radiocsirt.org/vuln/ghsa-xpg8-7m6m-jf56 GHSA-xpg8-7m6m-jf56 — ImageMagick: SVG-to-MVG Command Injection via coders/svg.c 2026-10-04T11:30:03.630035+00:00

Affected: NuGet: Magick.NET-Q16-AnyCPU, NuGet: Magick.NET-Q16-HDRI-AnyCPU, NuGet: Magick.NET-Q16-HDRI-OpenMP-arm64, NuGet: Magick.NET-Q16-HDRI-OpenMP-x64, NuGet: Magick.NET-Q16-HDRI-arm64, NuGet: Magick.NET-Q16-HDRI-x64, NuGet: Magick.NET-Q16-HDRI-x86, NuGet: Magick.NET-Q16-OpenMP-arm64, NuGet: Magick.NET-Q16-OpenMP-x64, NuGet: Magick.NET-Q16-OpenMP-x86 and 9 more

An attacker can inject arbitrary MVG (Magick Vector Graphics) drawing commands in an SVG file that is read by the internal SVG decoder of ImageMagick. The injected MVG commands execute during rendering.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11127-1 openSUSE-SU-2026:11127-1 — ImageMagick-7.1.2.25-3.1 on GA media 2026-10-04T11:30:03.630087+00:00

ImageMagick-7.1.2.25-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:32961 RHSA-2026:32961 — Red Hat Security Advisory: ImageMagick security update 2026-10-04T11:30:03.630109+00:00

ImageMagick: ImageMagick: Denial of Service due to resource policy bypass in PSD decoder ImageMagick: ImageMagick: Denial of Service due to excessive resource use in MNG coder ImageMagick: ImageMagick: Denial of Service via out-of-bounds write when processing multiple images ImageMagick: ImageMagick: Denial of Service via crafted MIFF file ImageMagick: ImageMagick: Denial of Service via crafted MSL image leading to heap-use-after-free ImageMagick: ImageMagick: Heap buffer over-write via `magick -distribute-cache` service connection ImageMagick: ImageMagick: Denial of Service via crafted DCM image with invalid dimensions ImageMagick: ImageMagick: Denial of Service via missing memory request check ImageMagick: ImageMagick: Arbitrary code execution via SVG decoder command injection

 https://cve.radiocsirt.org/vuln/suse-su-2026:22620-1 SUSE-SU-2026:22620-1 — Security update for ImageMagick 2026-10-04T11:30:03.630139+00:00

Security update for ImageMagick

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-56379 UBUNTU-CVE-2026-56379 2026-10-04T11:30:03.630159+00:00

Affected: Ubuntu:Pro:14.04:LTS: imagemagick, Ubuntu:Pro:16.04:LTS: imagemagick, Ubuntu:Pro:18.04:LTS: imagemagick, Ubuntu:Pro:20.04:LTS: imagemagick, Ubuntu:Pro:22.04:LTS: imagemagick, Ubuntu:Pro:24.04:LTS: imagemagick, Ubuntu:25.10: imagemagick

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0484 WID-SEC-W-2026-0484 — ImageMagick: Mehrere Schwachstellen 2026-10-04T11:30:03.630188+00:00

Ein Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere nicht näher definierte Angriffe durchzuführen.