PT-2026-107557

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-31 Description A client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, resulting in a server crash. A...

CLSA-2026-1782720378 Fix CVE(s): CVE-2026-46559, CVE-2026-46692, CVE-2026-46693, CVE-2026-47166

SECURITY UPDATE: heap over-write, file-descriptor hijack race, and heap over-read in the distributed pixel cache server - debian/patches/CVE-2026-46692-46693-47166.patch: bound the requested region against the pixel cache extent before reading or writing pixels and indexes, and hand each connecti...

CLSA-2026-1782314022 Fix CVE(s): CVE-2026-46559, CVE-2026-46692, CVE-2026-46693, CVE-2026-47166

SECURITY UPDATE: heap over-write, file-descriptor hijack race, and heap over-read in the distributed pixel cache server - debian/patches/CVE-2026-46692-46693-47166.patch: bound the requested region against the pixel cache extent before reading or writing pixels and indexes, and hand each connecti...

CLSA-2026-1781606042 ImageMagick: Fix of 9 CVEs

CVE-2026-45358: off-by-one out-of-bounds read in the meta 8BIM/IPTC encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder zero rows/columns - CVE-2026-53461: heap buffer over-write in the ICON decoder due...

CLSA-2026-1781606022 ImageMagick: Fix of 9 CVEs

CVE-2026-45358: off-by-one out-of-bounds read in the meta 8BIM/IPTC encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder zero rows/columns - CVE-2026-53461: heap buffer over-write in the ICON decoder due...

CLSA-2026-1781605653 ImageMagick: Fix of 9 CVEs

CVE-2026-45358: off-by-one out-of-bounds read in the meta 8BIM/IPTC encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder zero rows/columns - CVE-2026-53461: heap buffer over-write in the ICON decoder due...

CLSA-2026-1781605589 ImageMagick: Fix of 9 CVEs

CVE-2026-45358: off-by-one out-of-bounds read in the meta 8BIM/IPTC encoder - CVE-2026-46559: heap buffer over-write of a single byte in the JP2 encoder - CVE-2026-49218: missing dimension check in the DCM decoder zero rows/columns - CVE-2026-53461: heap buffer over-write in the ICON decoder due...