ImageMagick: Heap Buffer Over-Write in distributed pixel cache server
CVE-2026-46692
An attacker who can connect to a `magick -distribute-cache` service can cause a heap buffer over-write in the server pro
共收录 132 条相关情报。
← 返回所有主题CVE-2026-46692
An attacker who can connect to a `magick -distribute-cache` service can cause a heap buffer over-write in the server pro
The PasskeyEncipherImage method is vulnerable to information disclosure via AES-CTR nonce reuse. ImageMagick has update
An user supplied large binomial kernel could result in an overflow that would lead to a division by zero.
An incorrect fix that was applied in GHSA-5592-p365-24xh could result in a heap buffer over-write of a single byte.
CVE-2026-46609
### Impact Authenticated users are able to inject HTML vulnerability into an input field, which is rendered in the confi
CVE-2026-45785
### Summary The BST name-lookup loop in `DirectoryTree.TryGetDirectoryEntry` (`OpenMcdf/DirectoryTree.cs:35-46`) walks d
CVE-2026-46559
An incorrect check in the JP2 will result in an heap buffer over-write of a single byte when specifying certain options.
CVE-2026-46557
Due to a missing depth check a stack overflow can occur in the fx operation by passing a crafted argument.
CVE-2026-46523
A crafted MSL image can trigger a heap-use-after-free.
CVE-2026-46522
Due to a missing check in the MIFF decoder a crafted file could cause an infinite loop resulting in CPU exhaustion.
CVE-2026-46521
When using LZMA compression in the MIFF encoder an out of bounds write can occur due to a missing check.
CVE-2026-46520
When reading multiple images with different dimensions an out of bounds heap write can occur.
CVE-2026-45664
Because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would al
CVE-2026-45624
When performing a polynomial distortion an out of bounds over-read of 24 bytes can occur when specifying specific argume
CVE-2026-35433
## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .N
CVE-2026-42899
## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .N
CVE-2026-32175
## Executive Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in .N
CVE-2026-45031
Due to a missing check in the PSD decoder it would be possible to bypass the `list-length` resource policy when decoding
CVE-2026-45358
An of by one in the meta encoder could result in an out of bounds read of a single byte in the meta encoder.
CVE-2026-45359
An invalid `connected-components:keep-top` value could result in a heap buffer over-read when performing the connected c