Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Medium | 4.8 | CVE-2026-116160 |
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing crafted images
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116160ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing crafted images
Executive summaryImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33 contain a heap-based buffer overflow in the X11 animate operation when processing a crafted image. The advisory rates the severity as low, with a CVSS v3.1 base score of 3.3, and recommends upgrading to 7.1.2-33 or 6.9.13-58. Technical summaryThe flaw is a heap-based buffer overflow (heap buffer over-write) triggered when X11 animate processes a crafted image. The CVSS vector is AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L, so exploitation requires local access and user interaction, and the advisory describes only a low availability impact. Affected versions are below 7.1.2-33 and below 6.9.13-58, with patched versions 7.1.2-33 and 6.9.13-58. The advisory does not state any workaround, and it gives no detection guidance, exploitation-in-the-wild status, or CVE identifier (it says No known CVE). Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6p6q-wfrv-ffhh Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 4.8 | CVE-2026-116159 |
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl (color decision list) option, where allocated memory is not cleaned up...
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116159ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl (color decision list) option, where allocated memory is not cleaned up...
Executive summaryImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33 contain a memory leak in the -cdl (color decision list) option. The advisory rates it low severity, with a CVSS v3.1 base score of 3.3, and the fix is to update to 6.9.13-58 or 7.1.2-33. Technical summaryThe flaw is a missing release of allocated memory (CWE-401) in the handling of the -cdl option, which causes a memory leak. The attack vector is listed as local, with low attack complexity, no privileges required, and user interaction required, and the impact is stated as low availability only (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L). Affected versions are stated as before 6.9.13-58 and before 7.1.2-33, with patched versions 6.9.13-58 and 7.1.2-33. No CVE ID is assigned in the advisory. Workarounds and detection guidance are not stated, and exploitation in the wild is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c2qq-jqw7-q4mx Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Low | 2.0 | CVE-2026-116158 |
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation fails
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116158ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation fails
Executive summaryA memory leak in the magick compare command of ImageMagick, a tool for editing and comparing images, affects versions before 7.1.2-33. The advisory rates it Low severity, with a CVSS score of 2.5, and the fix is to update to version 7.1.2-33. Technical summaryThe flaw is a memory leak (CWE-401, missing release of memory) caused by missing cleanup in magick compare when an operation fails. The advisory describes it as a local attack requiring high attack complexity and user interaction, with no privileges needed, and a CVSS v3.1 vector of AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L. The impact is limited to availability (low). Affected versions are stated as before 7.1.2-33 and the patched version is 7.1.2-33. No CVE identifier is listed (the advisory says No known CVE). Workarounds are not stated, and no detection guidance or indication of exploitation in the wild is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m938-565c-h9qf Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 4.8 | CVE-2026-116157 |
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free values returned when reading image properties
ImageMagickImageMagick, ImageMagick PerlMagick
|
NVD | |||
|
CVE-2026-116157ImageMagick before 7.1.2-33 contains a memory leak vulnerability in PerlMagick that fails to free values returned when reading image properties
Executive summaryA memory leak in the PerlMagick interface of ImageMagick, a widely used image processing library, is rated Low severity by the advisory. The fix is to upgrade ImageMagick to version 7.1.2-33 or later, which the advisory names as the patched version. Technical summaryThe flaw is CWE-401, missing release of memory after effective lifetime, in five locations in PerlMagick that return values that are never freed when image properties are read. The advisory gives a CVSS v3.1 vector of AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L with a base score of 3.3, meaning local access and user interaction are required and the impact is limited to availability. Affected versions are stated as before 7.1.2-33 and the patched version is 7.1.2-33. The advisory does not state any workaround, whether the flaw is exploited in the wild, or any detection guidance. The advisory lists no CVE ID, though the page identifier is CVE-2026-116157. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pj4h-g4pf-66v3 Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 4.8 | CVE-2026-116156 |
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116156ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used
Executive summaryImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33 contain a memory leak that occurs when the -set profile option is used. The advisory rates the issue as low severity, with a CVSS v3.1 base score of 3.3, and the fix is to update to 6.9.13-58 or 7.1.2-33. Technical summaryThe flaw is a memory leak (CWE-401, missing release of memory after effective lifetime) caused by a missing cleanup step when the -set profile option is used. The attack vector is local, attack complexity is low, no privileges are required, and user interaction is required; the impact is low availability only, with no confidentiality or integrity impact. Affected versions are listed as before 7.1.2-33 and before 6.9.13-58, and patched versions are 7.1.2-33 and 6.9.13-58. The advisory does not state any workaround, and it provides no detection guidance. No CVE ID is assigned in the advisory, and it does not state whether the issue is known to be exploited in the wild. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7r5g-p7ff-jgcp Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.9 | CVE-2026-116155 |
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of XMP profiles by various decoders
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116155ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of XMP profiles by various decoders
Executive summaryA memory leak in ImageMagick, an image processing software package, can be triggered by a crafted XMP profile processed by various decoders. The advisory rates the severity as Moderate with a CVSS base score of 5.3. The fix is to update to 7.1.2-33 or 6.9.13-58, depending on the branch in use. Technical summaryThe flaw is a memory leak (CWE not stated; the advisory lists no CWEs) triggered when ImageMagick parses a crafted XMP profile in various decoders. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L, so the attack is remote and needs no privileges or user interaction, with only a low availability impact. Affected versions are below 7.1.2-33 and below 6.9.13-58, with patched versions 7.1.2-33 and 6.9.13-58. The advisory does not state any workaround, whether the issue is exploited in the wild, or any detection guidance. No CVE identifier is listed in the advisory. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5jf2-9gcp-q234 Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.9 | CVE-2026-116154 |
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, where allocated memory is not released when parsing reaches the nesting...
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116154ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, where allocated memory is not released when parsing reaches the nesting...
Executive summaryImageMagick, an image processing library, contains a memory leak in its XML parsing code that is triggered when parsing hits a nesting depth limit. The advisory rates the severity as Moderate with a CVSS base score of 5.3 and says the fix is to upgrade to patched versions 7.1.2-33 or 6.9.13-58. Technical summaryThe flaw is a memory leak (CWE not stated; the advisory lists no CWEs) in ImageMagick XML parsing, where allocated memory is not released when parsing reaches the depth limit. The CVSS v3.1 vector is AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L, so it is remotely reachable without privileges or user interaction and affects availability only. Affected versions are before 6.9.13-58 and before 7.1.2-33; patched versions are 6.9.13-58 and 7.1.2-33. No workaround, detection guidance, or exploitation status is stated, and no CVE ID is listed (the advisory says No known CVE). Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8ghq-p369-g395 Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Low | 2.0 | CVE-2026-116153 |
ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116153ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested
Executive summaryImageMagick builds for 32-bit systems before 7.1.2-33 contain a memory corruption flaw that can be triggered when convex-hull information is requested. The advisory rates it as low severity with a CVSS score of 2.5, and the vendor's fix is to update to version 7.1.2-33. No known CVE identifier is assigned in the advisory. Technical summaryThe flaw is a heap buffer over-write, classified under CWE-190 (Integer Overflow or Wraparound), that occurs when convex-hull information is requested on 32-bit systems. The advisory lists the attack vector as local, attack complexity as high, no privileges required, and user interaction required, with only low availability impact and no confidentiality or integrity impact. Affected versions are stated as less than 7.1.2-33 and the patched version is 7.1.2-33. Workarounds are not stated, and no exploitation in the wild or detection guidance is mentioned in the advisory. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7438-vh5v-v52h Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.9 | CVE-2026-116152 |
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that fails to release allocated memory in a specific error path
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116152ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that fails to release allocated memory in a specific error path
Executive summaryImageMagick versions before 7.1.2-33 contain a memory leak in the MAT image decoder that occurs in a specific error path. The advisory rates the issue as moderate, with a CVSS v3.1 base score of 5.3, and the fix is to update to version 7.1.2-33. Technical summaryThe weakness is CWE-401 (Missing Release of Memory after Effective Lifetime), a small leak triggered in an error path of the MAT decoder. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L, so the advisory describes network exploitation with no privileges or user interaction and only low availability impact. Affected versions are stated as less than 7.1.2-33, and the patched version is 7.1.2-33. No workaround is stated, no CVE identifier is listed (it says No known CVE), and no exploitation in the wild or detection guidance is stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-83w9-w85j-h9jc Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.3 | CVE-2026-116151 |
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the JNG encoder that fails to release allocated memory when processing a crafted image
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116151ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the JNG encoder that fails to release allocated memory when processing a crafted image
Executive summaryA memory leak in the JNG image encoder of ImageMagick affects versions before 6.9.13-58 and 7.x before 7.1.2-33. The advisory rates it low severity, with a CVSS v3.1 base score of 3.7, and recommends updating to the patched versions 6.9.13-58 or 7.1.2-33. Technical summaryThe flaw is classified as CWE-401, missing release of memory after effective lifetime, in the JNG encoder, triggered when processing a crafted image. The advisory gives the CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L, so the attack is network-reachable with high complexity, no privileges, and no user interaction, and the impact is limited to availability. Affected versions are stated as before 6.9.13-58 and before 7.1.2-33, with patched versions 6.9.13-58 and 7.1.2-33. The advisory does not state any workaround. It does not provide detection guidance, exploitation status in the wild, or a CVE identifier (it states No known CVE). Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v9q4-cm37-q2jm Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Low | 2.3 | CVE-2026-116150 |
ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX encoder that allows attackers to exhaust memory by supplying a crafted image
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116150ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the FPX encoder that allows attackers to exhaust memory by supplying a crafted image
Executive summaryImageMagick versions before 7.1.2-33 contain a memory leak in the FPX image encoder that a crafted image can trigger, causing memory exhaustion. The advisory rates the issue Low severity with a CVSS 3.1 base score of 3.1. The recommended fix is to update to version 7.1.2-33 or later. Technical summaryThe flaw is a memory leak classified as CWE-401 (Missing Release of Memory after Effective Lifetime) in the FPX encoder of ImageMagick. The advisory states the attack vector is network, with high attack complexity, no privileges required, and required user interaction, and the impact is limited to low availability impact with no confidentiality or integrity impact. Affected versions are stated as less than 7.1.2-33 and the patched version is 7.1.2-33. No workaround is stated, and no detection guidance or evidence of exploitation in the wild is stated. No CVE identifier is listed in the advisory beyond the one provided by the requester. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8w9c-hj38-8pf9 Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| High | 7.2 | CVE-2026-116149 |
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116149ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images
Executive summaryImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33 contain a memory flaw that can be triggered by a crafted bzip2-compressed image. The advisory rates it High severity and says the fix is to upgrade to 7.1.2-33 or 6.9.13-58. Technical summaryThe flaw is a stack-based buffer overflow (stack buffer over-write) when ImageMagick reads bzip2 compressed images, mapped to CWE-787 with related CWE-125 and CWE-573. The advisory lists the attack vector as network with low attack complexity, low privileges required, and no user interaction, based on the CVSS vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H with a base score of 8.1. Affected versions are stated as before 7.1.2-33 and before 6.9.13-58, with patched versions 7.1.2-33 and 6.9.13-58. The advisory states no CVE ID is known. Workarounds are not stated, exploitation in the wild is not stated, and detection guidance is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pwpf-8799-94cj Impact if exploitedConfidentialityNone IntegrityHigh AvailabilityHigh
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 4.8 | CVE-2026-116148 |
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG encoder, which does not properly neutralize user-specified drawing options...
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116148ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains an injection vulnerability in the MVG encoder, which does not properly neutralize user-specified drawing options...
Executive summaryA code injection flaw in the MVG encoder of ImageMagick affects versions before 6.9.13-58 and 7.x before 7.1.2-33. The advisory rates it Low severity and recommends updating to the patched versions 6.9.13-58 or 7.1.2-33. Technical summaryThe advisory describes an injection vulnerability in the MVG encoder that does not properly neutralize user-specified drawing options, which can lead to code injection. The CVSS v3.1 vector is AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N, meaning local access, no privileges, user interaction required, and low confidentiality impact. Affected versions are stated as before 7.1.2-33 and before 6.9.13-58, with patched versions 7.1.2-33 and 6.9.13-58. The advisory lists a CWE-79 cross-site scripting weakness, which appears inconsistent with the described flaw, and no CVE ID is assigned. Workarounds and detection guidance are not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qq8x-fq3x-43h4 Impact if exploitedConfidentialityLow IntegrityNone AvailabilityNone
How it is exploited
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.3 | CVE-2026-116147 |
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null pointer dereference in the DJVU decoder because the result of a memory allocation is not checked before use
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116147ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null pointer dereference in the DJVU decoder because the result of a memory allocation is not checked before use
Executive summaryImageMagick, an image processing library, has a flaw in its DJVU image decoder that can cause it to crash. The advisory rates the severity as low, with a CVSS score of 3.7, and the vendor recommends upgrading to ImageMagick 7.1.2-33 or 6.9.13-58, which are the patched versions. Technical summaryThe flaw is a null pointer dereference (CWE-476) in the DJVU decoder, caused by using the result of a memory allocation without checking it first, so a failed allocation leads to a crash. The CVSS v3.1 vector is AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L, meaning it is remotely reachable over the network with high complexity, no privileges or user interaction needed, and only low availability impact. Affected versions are listed as before 6.9.13-58 and before 7.1.2-33, with patched versions 6.9.13-58 and 7.1.2-33. The advisory does not state any workaround, and it gives no detection guidance. No CVE identifier is listed (the advisory says 'No known CVE'), and it does not state whether the flaw is exploited in the wild. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v5f5-4v9x-p3f2 Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.3 | CVE-2026-116146 |
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL decoder that fails to release allocated memory when processing a crafted MSL image
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116146ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the MSL decoder that fails to release allocated memory when processing a crafted MSL image
Executive summaryA memory leak in the MSL decoder of ImageMagick, an image processing package, can be triggered by a crafted MSL image. The advisory rates it Low, with a CVSS v3.1 base score of 3.7, and recommends upgrading to ImageMagick 7.1.2-33 or 6.9.13-58 or later. Technical summaryThe flaw is classified as CWE-401 (missing release of memory after effective lifetime) and CWE-400 (uncontrolled resource consumption). The vector is network-based with high attack complexity, no privileges, and no user interaction, and the advisory's vector shows only low availability impact with no confidentiality or integrity impact. Affected versions are listed as before 6.9.13-58 and before 7.1.2-33, with patched versions 6.9.13-58 and 7.1.2-33. The advisory does not state any workaround, and it gives no detection guidance, exploitation status, or CVE identifier (it lists 'No known CVE'). The advisory's text does not explain how the crafted MSL image must be delivered beyond being processed by the decoder. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j657-rmv3-4m94 Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Low | 1.8 | CVE-2026-116145 |
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for the policy bypass reported in GHSA-jjp4-3fwf-393j
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116145ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for the policy bypass reported in GHSA-jjp4-3fwf-393j
Executive summaryImageMagick, an image processing software package, has a security policy bypass caused by an incomplete fix for an earlier policy bypass. The advisory rates the severity as Low, with a CVSS v3 base score of 3.9. The vendor's recommendation is to upgrade to ImageMagick 7.1.2-32 or 6.9.13-58, depending on the branch in use. Technical summaryThe weakness is classified as CWE-693 (Protection Mechanism Failure) and results from an incomplete fix of GHSA-jjp4-3fwf-393j, which allowed a policy bypass. The CVSS v3.1 vector is AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L, meaning exploitation requires local access, high complexity, and high privileges. Affected versions are stated as before 6.9.13-58 and before 7.1.2-32, with patched versions 6.9.13-58 and 7.1.2-32. No workaround is stated in the advisory. No detection guidance is stated, and no CVE identifier is listed. Exploitation in the wild is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4wfv-467j-fqh9 Impact if exploitedConfidentialityLow IntegrityLow AvailabilityLow
How it is exploited
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 4.8 | CVE-2026-116144 |
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG decoder that can lead to a stack overflow
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116144ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains uncontrolled recursion in the MVG decoder that can lead to a stack overflow
Executive summaryImageMagick versions before 6.9.13-58 and before 7.1.2-33 contain a flaw that can crash the image processing software when it reads a specially crafted file. The advisory rates the severity as low, with a CVSS v3.1 base score of 3.3, and the vendor recommends upgrading to 7.1.2-33 or 6.9.13-58. Technical summaryThe flaw is uncontrolled recursion (CWE-674) in the MVG decoder, which can exhaust the program stack and cause a stack overflow. The advisory describes the attack vector as local, with low attack complexity, no privileges required, and user interaction required, and it says the impact is limited to low availability loss. Affected versions are listed as less than 7.1.2-33 and less than 6.9.13-58, with patched versions 7.1.2-33 and 6.9.13-58. The advisory does not state any workaround. It does not state whether exploitation has occurred in the wild, and it gives no detection guidance. No CVE assignment is listed in the advisory text, and the advisory is tagged GHSA-x258-xjqf-6j3f. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x258-xjqf-6j3f Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 4.8 | CVE-2026-116143 |
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allows the security policy's list length limit on scene...
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116143ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allows the security policy's list length limit on scene...
Executive summaryA policy bypass in ImageMagick's PS, PDF and XPS decoders lets the security policy's list length limit on scene selection be circumvented. The advisory rates it Low severity with a CVSS 3.1 base score of 3.3, and the fix is to update to a patched version. Technical summaryThe flaw is classified as CWE-770, allocation of resources without limits or throttling, and the advisory describes it as a policy bypass where a specific argument lets an attacker get around scene selection in the PS, PDF and XPS decoders. The CVSS v3.1 vector is AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L, so exploitation requires local access and low privileges with no user interaction, and the impact is limited to availability. Affected versions are below 7.1.2-33 and below 6.9.13-58, and patched versions are 7.1.2-33 and 6.9.13-58. The advisory does not state a workaround, and it does not state any detection guidance or whether the flaw is exploited in the wild. No CVE identifier is listed; the advisory says 'No known CVE'. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fp46-842c-2v83 Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 4.8 | CVE-2026-116142 |
ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116142ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box
Executive summaryA heap buffer over-read in ImageMagick lets an attacker read memory beyond what was allocated when a minimum-bounding-box is printed. The advisory rates it Low, with a CVSS 3.1 base score of 3.3, and says the fix is to upgrade ImageMagick to version 7.1.2-33 or later. Technical summaryThe flaw is classified as CWE-125, an out-of-bounds read, and is triggered when a crafted image causes a minimum-bounding-box to be printed. The CVSS vector is AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N, so exploitation requires local access and user interaction, and impact is limited to low confidentiality loss. Affected versions are stated as before 7.1.2-33, and the patched version is 7.1.2-33. The advisory does not state any workaround. It also does not give detection guidance or say whether the flaw is exploited in the wild. No CVE identifier is assigned in the advisory. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5222-mhv9-26rg Impact if exploitedConfidentialityLow IntegrityNone AvailabilityNone
How it is exploited
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.9 | CVE-2026-116141 |
ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder that allows attackers to evade image width and height limits because extent checks occur...
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116141ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder that allows attackers to evade image width and height limits because extent checks occur...
Executive summaryImageMagick versions before 7.1.2-33 contain a policy bypass in the UHDR image decoder that lets attackers get around configured image width and height limits. The advisory rates it Moderate, with a CVSS v3.1 base score of 5.3, and the fix is to update to version 7.1.2-33. Technical summaryThe flaw is classified under CWE-400 and CWE-770: the width and height checks in the UHDR decoder run after decoding rather than before UHDR decoder.decode, so resource limits are not enforced in time. The advisory's CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L, meaning it is network-reachable with no privileges or user interaction and only low availability impact. Affected versions are stated as before 7.1.2-33, and the patched version is 7.1.2-33. No workaround is stated in the advisory. No CVE identifier is assigned in the advisory ('No known CVE'). Exploitation status and detection guidance are not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h3qx-937j-245g Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 4.8 | CVE-2026-116140 |
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-116140ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 incorrectly parses delegate invocations, which can allow an executable blocked in policy.xml to still run
Executive summaryImageMagick versions before 6.9.13-58 and before 7.1.2-33 can be tricked into running an executable that the site's policy.xml file blocks. The advisory rates this as low severity with a CVSS base score of 3.3, and the fix is to update to 6.9.13-58 or 7.1.2-33. Technical summaryThe flaw is an incorrect authorization check (CWE-863) in how ImageMagick parses delegate invocations, which allows an executable blocked in policy.xml to still run. The attack vector is local, with low attack complexity, no privileges required, and user interaction required. The CVSS v3.1 vector is AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. Affected versions are stated as before 6.9.13-58 and before 7.1.2-33, and patched versions are 6.9.13-58 and 7.1.2-33. The advisory does not state any workaround, and it gives no detection guidance. No CVE ID is assigned according to the advisory. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-528x-2384-jmxp Impact if exploitedConfidentialityNone IntegrityLow AvailabilityNone
How it is exploited
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 6.3 | CVE-2026-109964 |
ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-109964ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow
From the advisoryImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and write up to 128 controlled bytes below the heap buffer, causing crashes or code execution. Impact if exploitedConfidentialityLow IntegrityLow AvailabilityLow
How it is exploited
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Low | 2.0 | CVE-2026-109282 |
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an...
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-109282ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an...
From the advisoryImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a SIGABRT or SIGSEGV, crashing the process and causing denial of service. Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Medium | 4.8 | CVE-2026-109281 |
ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated...
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-109281ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated...
From the advisoryImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap memory, potentially disclosing limited memory contents. Impact if exploitedConfidentialityLow IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||
| Low | 2.0 | CVE-2026-109280 |
ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation
ImageMagickImageMagick
|
NVD | |||
|
CVE-2026-109280ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation
From the advisoryImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who can supply crafted -fx expressions under memory pressure can trigger freed memory access, causing crashes or memory corruption. Impact if exploitedConfidentialityNone IntegrityNone AvailabilityLow
How it is exploited
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||