SUSE CVE-2026-107208

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processing process. This...

SUSE CVE-2026-107209

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause the RSVG decoder to free image state twice and then use fre...

SUSE CVE-2026-107210

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit, bypassing resource restrictions a...

Missing Release of File Descriptor or Handle after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of File Descriptor or Handle after Effective Lifetime via the magick script process. An attacker can exhaust system resources and cause a denial of service by submitting specially crafted scripts that leave file pointers...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the distributed pixel cache server process. An attacker can cause the server to crash by connecting to the service and sending specially crafted data that overwrites heap memory. Remediation A fix was pushe...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the GetVirtualPixels API. An attacker can cause a server crash by supplying crafted input that triggers an out-of-bounds heap write. Remediation A fix was pushed into the master branch but not yet...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the MVG decoder. An attacker can cause excessive CPU consumption and stall image processing by supplying a specially crafted MVG image. Details Denial of Service DoS describes a family of attacks, all aimed at...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS through the handling of XMP profiles. An attacker can cause the application to terminate unexpectedly by supplying a crafted image containing a malicious XMP profile. Details Denial of Service DoS describes a famil...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the PostScript coders when certain values are not properly escaped or trimmed before being written to output. An attacker can execute arbitrary PostScript code by supplying crafted input values that are...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass due to the lack of a security policy check in the CUT encoder. An attacker can cause the application to crash or leak sensitive data by supplying crafted input that is processed by the CUT encoder. Remediation A fi...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS through the parsing of XMP profiles. An attacker can cause the application to crash or hang by supplying a specially crafted XMP profile that triggers a failure during the calculation of numerator and denominator...

Release of Invalid Pointer or Reference

Overview Affected versions of this package are vulnerable to Release of Invalid Pointer or Reference through the MVG decoder. An attacker can cause the application to crash by submitting a specially crafted MVG image that triggers an invalid memory free operation. Remediation A fix was pushed int...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion through the CALS decoder due to a missing depth check. An attacker can exhaust the stack and crash the process by supplying a crafted CALS image that triggers unbounded recursion. Remediation A fix was pushed into...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the coder policy domain. An attacker can bypass intended security restrictions by supplying a specially crafted image, which causes processing of formats that should be blocked according to administrator...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification in the MAT decoder due to improper enforcement of configured temporary file size limits when processing highly compressed data. An attacker can exhaust disk resources by...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the RSVG decoder when built without cairo support. An attacker can cause access to freed memory and application crash by supplying crafted SVG files that trigger a decoding limit. Remediation A fix was pushed into the...

CVE-2026-107639

ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options via uploaded image filenames. Attackers can embed tab-separated options, which escapeshellcmd does no...

DEBIAN-CVE-2026-105823

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...

DEBIAN-CVE-2026-105825

ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception. Attackers can supply images with malicious XMP profiles to crash applications that proce...

DEBIAN-CVE-2026-105827

ImageMagick before 7.1.2-30 and 6.9.13-55 contains an uncontrolled recursion vulnerability in the CALS decoder due to a missing depth check. Attackers can supply a crafted CALS image that triggers unbounded recursion, exhausting the stack and crashing the process, resulting in a denial of service...