Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-84mh-5fq7-7fx5

Опубликовано: 11 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.3
CVSS3: 3.7

Описание

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.

EPSS

Процентиль: 18%
0.00265
Низкий

6.3 Medium

CVSS4

3.7 Low

CVSS3

Дефекты

CWE-252

Связанные уязвимости

CVSS3: 3.7
ubuntu
23 дня назад

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.

CVSS3: 6.5
redhat
23 дня назад

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.

CVSS3: 3.7
nvd
23 дня назад

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerability caused by missing null check when parsing XMP profiles. Attackers can craft malicious image files with specially crafted XMP data to trigger the vulnerability and cause application crashes.

CVSS3: 3.7
debian
23 дня назад

ImageMagick before 7.1.2-26 contains a heap use-after-free vulnerabili ...

suse-cvrf
14 дней назад

Security update for ImageMagick

EPSS

Процентиль: 18%
0.00265
Низкий

6.3 Medium

CVSS4

3.7 Low

CVSS3

Дефекты

CWE-252