19974 matches found
CVE-2026-105825
...
CVE-2026-105825 ImageMagick before 7.1.2-30 Denial of Service via Crafted XMP Profile
ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception. Attackers can supply images with malicious XMP profiles to crash applications that proce...
CVE-2026-105826 ImageMagick before 7.1.2-30 Security Policy Bypass via MAT Decoder
ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a security policy bypass in the MAT decoder, which does not enforce configured temporary file size limits when reading highly compressed data. Attackers can supply a crafted MAT image whose decompressed data is written to temporary fil...
EUVD-2026-95013
ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a security policy bypass in the MAT decoder, which does not enforce configured temporary file size limits when reading highly compressed data. Attackers can supply a crafted MAT image whose decompressed data is written to temporary fil...
CVE-2026-105825
A denial of service (DoS) vulnerability exists in ImageMagick versions before 6.9.13-55 and 7.x before 7.1.2-30 . The root cause is improper error handling during the processing of Extensible Metadata Platform (XMP) profiles; specifically, a crafted XMP profile can reach a recursion limit that is...
EUVD-2026-95012
ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a denial of service vulnerability in its handling of XMP profiles, where a crafted profile terminates the process instead of raising an exception. Attackers can supply images with malicious XMP profiles to crash applications that proce...
CVE-2026-105826
A security policy bypass exists in the ImageMagick MAT decoder in versions before 6.9.13-55 and 7.x before 7.1.2-30 . A remote attacker can submit a specially crafted MAT image containing highly compressed data that causes the decoder to fail to enforce configured temporary file size limits. This...
CVE-2026-105825
Removed by vendor...
CVE-2026-105826
Removed by vendor...
CVE-2026-105824 ImageMagick before 7.1.2-30 Use-After-Free in RSVG Decoder Without Cairo
ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a use-after-free vulnerability in the RSVG decoder when built without cairo support, triggered when a limit is hit during decoding. Attackers can supply crafted SVG files that cause a limit to be reached, leading to access of freed...
CVE-2026-105823 ImageMagick before 7.1.2-31 Policy Bypass in CUT Encoder
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...
EUVD-2026-95011
ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a use-after-free vulnerability in the RSVG decoder when built without cairo support, triggered when a limit is hit during decoding. Attackers can supply crafted SVG files that cause a limit to be reached, leading to access of freed...
CVE-2026-105823
The ImageMagick library is vulnerable in versions before 6.9.13-56 and 7.x before 7.1.2-31 due to a missing security-policy check in the CUT encoder . An attacker can supply specially crafted input to bypass configured security policies, which may result in the disclosure of sensitive information...
CVE-2026-105824
The ImageMagick software contains a use-after-free vulnerability in the RSVG decoder when compiled without Cairo graphics library support . The flaw is triggered during image processing when a decoding limit is reached, allowing a remote attacker to provide a specially crafted Scalable Vector Gra...
CVE-2026-105823
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...
EUVD-2026-95010
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data...