{"metadata": {"vulnerability": "cve-2026-109964", "count": 22, "kinds": {"milestone": 5, "sighting": 2, "kev": 0, "other": 15}}, "data": [{"timestamp": "2026-09-29T00:00:00Z", "date_only": false, "value": "2026-09-29T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-109964", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-11T22:00:00Z", "date_only": false, "value": "2026-10-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3867", "record": "WID-SEC-W-2026-3867", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-11T22:00:00Z", "date_only": false, "value": "2026-10-11T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3867", "record": "WID-SEC-W-2026-3867", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-11T22:00:00Z", "date_only": false, "value": "2026-10-11T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3867", "record": "WID-SEC-W-2026-3867", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-12T22:00:00Z", "date_only": false, "value": "2026-10-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3867", "record": "WID-SEC-W-2026-3867", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-13T11:26:13.464Z", "date_only": false, "value": "2026-10-13T11:26:13.464Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-109964", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T13:35:45.590Z", "date_only": false, "value": "2026-10-13T13:35:45.590Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-109964", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T13:35:45.590Z", "date_only": false, "value": "2026-10-13T13:35:45.590Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-109964", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T14:02:56.506Z", "date_only": false, "value": "2026-10-13T14:02:56.506988Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mxr74r6qet2o", "record": "CVE-2026-109964", "field": "creation_timestamp", "uuid": "24b5a826-1d2a-4a3e-8dcb-b1ea59754cec", "content": "CVE-2026-109964 affects ImageMagick, where a crafted PICT file can trigger a heap buffer underwrite in the PICT decoder on 32-bit builds, risking crashes or code execution. No exploitation confirmed. Fixed in versions 7.1.2-33 and 6.9.13-58.", "url": "https://bsky.app/profile/suriq.io/post/3mxr74r6qet2o"}, {"timestamp": "2026-10-13T14:17:35Z", "date_only": false, "value": "2026-10-13T14:17:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-279F-3W5R-54F5", "record": "GHSA-279F-3W5R-54F5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T14:17:35.907Z", "date_only": false, "value": "2026-10-13T14:17:35.907", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109964", "record": "FKIE_CVE-2026-109964", "field": "published"}, {"timestamp": "2026-10-13T14:32:42.074Z", "date_only": false, "value": "2026-10-13T14:32:42.074382Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117434086947728042", "record": "CVE-2026-109964", "field": "creation_timestamp", "uuid": "21d44a1c-84be-4f27-86dc-e5c959927871", "content": "CVE-2026-109964 ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and write up to 128 controlled bytes below the heap buffer, causing crashes or code execution.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109964https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7whttps://github.com/ImageMagick/ImageMagick/commit/63dde0cf281383ab69432b88305f7dcd6a8ce900https://github.com/ImageMagick/ImageMagick6/commit/c18c5d5fb7f1d87ddbe0a02e9d1207c89b24588chttps://github.com/ImageMagick/ImageMagick/blob/7.1.2-32/coders/pict.c#L503-L540https://github.com/ImageMagick/ImageMagickhttps://www.vulncheck.com/advisories/imagemagick-before-7.1.2-33-and-6.9.13-58-heap-buffer-underwrite-in-pict-decoder#ImageMagick#CVE_2026_109964#bot", "url": "https://infosec.exchange/users/cve/statuses/117434086947728042"}, {"timestamp": "2026-10-13T15:32:24Z", "date_only": false, "value": "2026-10-13T15:32:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-279F-3W5R-54F5", "record": "GHSA-279F-3W5R-54F5", "field": "published"}, {"timestamp": "2026-10-13T15:32:24Z", "date_only": false, "value": "2026-10-13T15:32:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-279F-3W5R-54F5", "record": "GHSA-279F-3W5R-54F5", "field": "modified"}, {"timestamp": "2026-10-13T15:47:49.610Z", "date_only": false, "value": "2026-10-13T15:47:49.610741Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-109964", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T15:47:49.610Z", "date_only": false, "value": "2026-10-13T15:47:49.610741Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109964", "record": "FKIE_CVE-2026-109964", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T16:43:16.967Z", "date_only": false, "value": "2026-10-13T16:43:16.967Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-109964", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T16:43:16.967Z", "date_only": false, "value": "2026-10-13T16:43:16.967Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-109964", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T18:04:15.847Z", "date_only": false, "value": "2026-10-13T18:04:15.847+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3867", "record": "WID-SEC-W-2026-3867", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-13T20:39:48.767Z", "date_only": false, "value": "2026-10-13T20:39:48.767", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109964", "record": "FKIE_CVE-2026-109964", "field": "lastModified"}, {"timestamp": "2026-10-13T22:00:00Z", "date_only": false, "value": "2026-10-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3867", "record": "WID-SEC-W-2026-3867", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-13T22:00:00Z", "date_only": false, "value": "2026-10-13T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-3867", "record": "WID-SEC-W-2026-3867", "field": "document.tracking.current_release_date"}]}