Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.
Open advisories
165 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.
A memory leak is possible when invalid options are passed to the cli (magick)
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
An integer overflow in the XCF decoder can result in an out of bounds read when a crafted image is read and that can result in a crash.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
When processing an extremely large JNX file on 32-bit platforms an integer overflow will happen that can cause a heap buffer over-write.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
A heap buffer over-write can occur in the fx operation by passing a crafted argument.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
An invalid kernel can cause a heap buffer over-write when performing a morphology operation with a user supplied kernel.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Running an X11 import with a crafted window title can result in a heap buffer over-write.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
An invalid tiff:tile-geometry will cause a memory leak in the TIFF encoder.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
A memory leak will occur in the ICON decoder when an allocation fails.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
When an allocation fails in the VIFF encoder a memory leak will occus.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
A memory leak will occur in the MIFF encoder when an allocation fails.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
A memory leak will occur when a blob cannot be opened in the YUV decoder.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
When an allocation fails in the TIFF encoder a small memory leak will occur.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
When a blob can not be opened a memory leak will occur when encoding a JNG file.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
When a specific operation fails in the hough lines operation a small memory leak will occur.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
When transforming an image to the log colorspace a small memory leak happens when the operation fails.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
When a temporary file can not be created a small memory leak will happen in the TIFF encoder.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
When a profile is displayed with the identify command and the value is not printable a single byte at the end of the profile can be printed.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
When a memory allocation fails inside the FormatMagickCaption method a dangling pointer still points to the freed memory.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
When the freetype initialization fails the method does not exit and uses memory that was freed.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
The -script operation is missing policy checks and that could result in both reading from paths disallowed by the security policy.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Due to a missing check in the APNG encoder and external delegates it is possibly to bypass the policy and write to a disallowed path.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Because of a missing null check when parsing an XMP profile a use after free will happen that might result in a crash.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
An incomplete fix of CVE-2026-25797 can result in code injection in the HTML encoder.
Recommended action: Upgrade to 14.10.3 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
An incomplete fix of CVE-2026-49219 could result in a policy bypass.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
Matrix bases operations like -canny are missing a check for allowed memory allocation that could result allocating more memory than allowed.
Recommended action: Upgrade to 14.15.0 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.