DEBIAN-CVE-2026-105827

ImageMagick before 7.1.2-30 and 6.9.13-55 contains an uncontrolled recursion vulnerability in the CALS decoder due to a missing depth check. Attackers can supply a crafted CALS image that triggers unbounded recursion, exhausting the stack and crashing the process, resulting in a denial of service...

DEBIAN-CVE-2026-105826

ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a security policy bypass in the MAT decoder, which does not enforce configured temporary file size limits when reading highly compressed data. Attackers can supply a crafted MAT image whose decompressed data is written to temporary fil...

DEBIAN-CVE-2026-105824

ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a use-after-free vulnerability in the RSVG decoder when built without cairo support, triggered when a limit is hit during decoding. Attackers can supply crafted SVG files that cause a limit to be reached, leading to access of freed...

CVE-2026-105823

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-105825

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-105826

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-105824

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-105827

Rejected reason: This CVE ID has been rejected as a duplicate...

DEBIAN-CVE-2026-105403

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 allows a security policy bypass when a policy uses coder, rather than module, as its domain. An attacker can supply a crafted image to evade coder-based policy restrictions, causing ImageMagick to process formats the administrator intended to...

DEBIAN-CVE-2026-105404

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by...

DEBIAN-CVE-2026-105402

ImageMagick before 7.1.2-31 contains a denial of service vulnerability that allows attackers to disrupt processing by supplying a crafted XMP profile. Attackers can embed a malicious XMP profile that triggers a failure when determining the numerator and denominator, crashing or hanging image...

DEBIAN-CVE-2026-105400

ImageMagick before 7.1.2-31 contains a resource leak vulnerability that allows attackers to leave file pointers open by supplying a crafted magick script. Attackers can process malicious magick scripts to leak file descriptors, potentially exhausting resources and causing denial of service...

DEBIAN-CVE-2026-105405

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains an invalid memory free vulnerability in the MVG decoder. Attackers can supply a crafted MVG image for processing to trigger the invalid free and crash the application, causing a denial of service...

DEBIAN-CVE-2026-105401

ImageMagick before 7.1.2-31 contains a heap buffer overflow vulnerability in the distributed pixel cache server that allows connecting clients to overwrite heap memory by sending crafted data. Attackers can connect to the distributed pixel cache server and transmit malicious data to trigger a hea...

CVE-2026-105400

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-105401

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-105404

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-105402

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-105403

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-105405

Rejected reason: This CVE ID has been rejected as a duplicate...