Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-28690

Опубликовано: 10 мар. 2026
Источник: nvd
CVSS3: 6.9
CVSS3: 6.5
EPSS Низкий

Описание

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow vulnerability exists in the MNG encoder. There is a bounds checks missing that could corrupting the stack with attacker-controlled data. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия до 6.9.13-41 (исключая)
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*
Версия от 7.0.0-0 (включая) до 7.1.2-16 (исключая)

EPSS

Процентиль: 1%
0.00096
Низкий

6.9 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVSS3: 6.9
ubuntu
5 месяцев назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow vulnerability exists in the MNG encoder. There is a bounds checks missing that could corrupting the stack with attacker-controlled data. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

CVSS3: 6.1
redhat
5 месяцев назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow vulnerability exists in the MNG encoder. There is a bounds checks missing that could corrupting the stack with attacker-controlled data. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

CVSS3: 6.9
debian
5 месяцев назад

ImageMagick is free and open-source software used for editing and mani ...

CVSS3: 6.5
redos
22 дня назад

Уязвимость ImageMagick7

CVSS3: 6.5
redos
около 2 месяцев назад

Уязвимость ImageMagick

EPSS

Процентиль: 1%
0.00096
Низкий

6.9 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-121