JLSEC-2026-978
- Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-978.md
- Import Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-978.json
- JSON Data
- https://api.osv.dev/v1/vulns/JLSEC-2026-978
- Upstream
- Published
- 2026-07-30T16:02:27.435Z
- Modified
- 2026-07-30T18:35:43.494826322Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:H CVSS Calculator
- Summary
- ImageMagick has stack write buffer overflow in MNG encoder
- Details
-
A stack buffer overflow vulnerability exists in the MNG encoder. There is a bounds checks missing that could corrupting the stack with attacker-controlled data.
==2265506==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffec4971310 at pc 0x55e671b8a072 bp 0x7ffec4970f70 sp 0x7ffec4970f68 WRITE of size 1 at 0x7ffec4971310 thread T0 - Database specific
{ "license": "CC-BY-4.0", "sources": [ { "database_specific": { "status": "Analyzed" }, "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-28690", "id": "CVE-2026-28690", "modified": "2026-06-17T10:28:54.933Z", "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28690", "published": "2026-03-10T07:43:44.127Z", "imported": "2026-07-30T14:08:46.065Z" }, { "url": "https://api.github.com/advisories/GHSA-7h7q-j33q-hvpf", "id": "GHSA-7h7q-j33q-hvpf", "modified": "2026-03-12T14:11:49Z", "html_url": "https://github.com/advisories/GHSA-7h7q-j33q-hvpf", "published": "2026-03-12T14:11:47Z", "imported": "2026-07-30T14:09:31.688Z" }, { "url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2026-10383", "published": "2026-03-09T21:39:53Z", "modified": "2026-03-10T15:58:15Z", "html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-10383", "imported": "2026-07-30T14:08:54.479Z", "id": "EUVD-2026-10383" } ] }- References
- Credits
-
-
- zerojackyi - REPORTER
-