molotovcherry android-imagemagick7

Name: molotovcherry android-imagemagick7
Brand: molotovcherry

productUS

cpe:2.3:a:molotovcherry:android-imagemagick7:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

by severity

1critical2high0medium0low

updated 2026-10-28

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-33856US	—	0.36% (29th)	—	7.1.2-11	2026-03-24	< 7.1.2-11
CVE-2026-4755US	—	0.29% (21st)	—	7.1.2-11	2026-03-24	< 7.1.2-11
CVE-2026-33852US	—	0.26% (18th)	—	7.1.2-11	2026-03-24	< 7.1.2-11
CVE-2026-33854US	critical9.8	0.25% (16th)	—	7.1.2-10	2026-03-24	< 7.1.2-10
CVE-2026-33855US	high7.5	0.22% (12th)	—	7.1.2-11	2026-03-24	< 7.1.2-11
CVE-2026-33853US	high7.5	0.17% (6th)	—	7.1.2-10	2026-03-24	< 7.1.2-10
CVE-2026-4754US	—	0.15% (4th)	—	7.1.2-11	2026-03-24	< 7.1.2-11
CVE-2026-4756US	—	0.11% (2nd)	—	7.1.2-11	2026-03-24	< 7.1.2-11

The flaw types (CWEs) most of these CVEs share.

CWE-401Missing Release of Memory after Effective Lifetime2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-476NULL Pointer Dereference1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.