PkgSeer

Vulnerability GHSA-pjxj-pchx-4c3m

Medium Risk
MEDIUM RISK
CVSS Score: 6.5
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
3 months ago
July 31, 2026 at 07:40 PM UTC
ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow
6.8.8.1001 - 14.14.0
6.8.8.1001 - 14.14.0

Summary

ImageMagick: Heap Buffer Over-Read in XCF decoder due to integer conversion overflow

Details

An integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read and that can result in a crash.

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Low Risk
2 months ago
ImageMagick: Memory Leak when providing invalid options to the cli
8.6.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
8.6.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
Low Risk
2 months ago
ImageMagick: Memory Leak when providing invalid options to the cli
8.6.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
8.6.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
Low Risk
2 months ago
ImageMagick: Memory Leak when providing invalid options to the cli
8.6.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
8.6.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
Low Risk
2 months ago
ImageMagick: Memory Leak when providing invalid options to the cli
8.6.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
8.6.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
Low Risk
2 months ago
ImageMagick: Memory Leak when providing invalid options to the cli
8.6.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
8.6.0 - 14.14.0 GHSA-cvhv-g4rq-3hmw
View all vulnerabilities for these packages

Impacted packages

Timeline

Published
3 months ago
July 31, 2026 at 07:40 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:07 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:07 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:07 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:07 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:07 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:08 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:08 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:08 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:08 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:08 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:08 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:08 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:08 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:08 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:08 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:08 PM UTC
Fixed (14.15.0)
3 months ago
July 12, 2026 at 05:08 PM UTC
Last Modified
3 months ago
July 31, 2026 at 07:45 PM UTC