Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-30937

Опубликовано: 10 мар. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 6.8

Описание

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a 32-bit unsigned integer overflow in the XWD (X Windows) encoder can cause an undersized heap buffer allocation. When writing a extremely large image an out of bounds heap write can occur. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

РелизСтатусПримечание
devel

not-affected

8:7.1.2.27+dfsg1-1
esm-apps/focal

released

8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13
esm-apps/jammy

released

8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13
esm-apps/noble

released

8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12
esm-apps/resolute

not-affected

8:7.1.2.18+dfsg1-1ubuntu0.1~esm1
esm-infra-legacy/trusty

released

8:6.7.7.10-6ubuntu3.13+esm24
esm-infra-legacy/xenial

released

8:6.8.9.9-7ubuntu5.16+esm23
esm-infra/bionic

released

8:6.9.7.4+dfsg-16ubuntu6.15+esm15
esm-infra/xenial

ignored

end of ESM support, was needs-triage
jammy

needed

Показывать по

EPSS

Процентиль: 1%
0.00099
Низкий

6.8 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.8
redhat
6 месяцев назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a 32-bit unsigned integer overflow in the XWD (X Windows) encoder can cause an undersized heap buffer allocation. When writing a extremely large image an out of bounds heap write can occur. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

CVSS3: 6.8
nvd
6 месяцев назад

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a 32-bit unsigned integer overflow in the XWD (X Windows) encoder can cause an undersized heap buffer allocation. When writing a extremely large image an out of bounds heap write can occur. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41.

CVSS3: 6.8
debian
6 месяцев назад

ImageMagick is free and open-source software used for editing and mani ...

CVSS3: 6.1
redos
3 месяца назад

Уязвимость ImageMagick

CVSS3: 6.8
github
6 месяцев назад

ImageMagick has heap buffer overflow in WriteXWDImage due to CARD32 arithmetic overflow in bytes_per_line calculation

EPSS

Процентиль: 1%
0.00099
Низкий

6.8 Medium

CVSS3