2026-10-13 归档

今日共收录 1460 条安全情报,包含 709 个 CVE,466 篇安全通告,以及 13 篇研究论文。

← 返回归档列表
漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpe...

CVE-2026-109282

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated he...

CVE-2026-109281

ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers ...

CVE-2026-109280

ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multipl...

CVE-2026-109279

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed,

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, which fails to release allocated memory when a required resource ca...

CVE-2026-109278

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, which fail

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. Attackers can use the -script oper...

CVE-2026-109277

ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on fil

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. A...

CVE-2026-109276

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafte...

CVE-2026-109275

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a P

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick scri...

CVE-2026-109274

ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to byp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than th...

CVE-2026-109273

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a craft...

CVE-2026-109272

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered whe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers ca...

CVE-2026-109271

ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a me

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option that allows attackers to cause unreleased memory allocations by supplying certain argumen...

CVE-2026-109270

ImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option that allows attackers to cause u

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the JPEG decoder, which performs a read that exposes uninitialized memor...

CVE-2026-109269

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the JPEG decode

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can ...

CVE-2026-109268

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can...

CVE-2026-109267

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection vulnerability in the CIP encoder, which does not properly escape input-derived data when writing C...

CVE-2026-109266

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection vulnerability in the CIP encoder, which d

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in X...

CVE-2026-109265

ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust the program stack. An attacker who controls a file name ...

CVE-2026-109264

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-12 发布INFO

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attacker...

CVE-2026-109263

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release a

历史摘要 · 未重新核验 · NVD