https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T13:06:47.748107+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-10131 CVE-2019-10131 2026-10-05T13:06:47.796707+00:00

Affected: ImageMagick

An off-by-one read vulnerability was discovered in ImageMagick before version 7.0.7-28 in the formatIPTCfromBuffer function in coders/meta.c. A local attacker may use this flaw to read beyond the end of the buffer or to crash the program.

 https://cve.radiocsirt.org/vuln/usn-4034-1 USN-4034-1 — imagemagick vulnerabilities 2026-10-05T13:06:47.796769+00:00

Affected: Ubuntu:16.04:LTS: imagemagick, Ubuntu:18.04:LTS: imagemagick

It was discovered that ImageMagick incorrectly handled certain malformed image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or possibly execute code with the privileges of the user invoking the program.

Due to a large number of issues discovered in GhostScript that prevent it from being used by ImageMagick safely, the update for Ubuntu 18.10 and Ubuntu 19.04 includes a default policy change that disables support for the Postscript and PDF formats in ImageMagick. This policy can be overridden if necessary by using an alternate ImageMagick policy configuration.