Vigilance.fr - ImageMagick: denial of service via Nested Vector Graphics, analyzed on 29/12/2025

...

Un attaquant peut forcer la lecture à une adresse mémoire invalide de Xpdf, via DCT Header Info, afin de mener un déni de service, ou d’obtenir des informations sensibles. Plus d'information sur :…

...

...

...

...

An attacker can trigger a buffer overflow of Xpdf, via PostScript Interpreter Code, in order to trigger a denial of service, and possibly to run code. - Security Vulnerability

An attacker can force a read at an invalid memory address of Xpdf, via DCT Header Info, in order to trigger a denial of service, or to obtain sensitive information. - Security Vulnerability