19990 matches found
CVE-2026-105404
Removed by vendor...
CVE-2026-105404 ImageMagick before 7.1.2-31 Code Injection via PostScript Coders
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by...
CVE-2026-105405 ImageMagick before 7.1.2-31 Invalid Memory Free in MVG Decoder
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains an invalid memory free vulnerability in the MVG decoder. Attackers can supply a crafted MVG image for processing to trigger the invalid free and crash the application, causing a denial of service...
CVE-2026-105405
Removed by vendor...
CVE-2026-105405
...
EUVD-2026-95009
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains an invalid memory free vulnerability in the MVG decoder. Attackers can supply a crafted MVG image for processing to trigger the invalid free and crash the application, causing a denial of service...
CVE-2026-105405
A flaw exists in ImageMagick before versions 6.9.13-56 and 7.x before 7.1.2-31 . A remote attacker can exploit an invalid memory free vulnerability in the MVG decoder by supplying a specially crafted Magick Vector Graphics (MVG) image for processing. This triggered condition crashes the applicati...
CVE-2026-105404
The ImageMagick software is vulnerable to a code injection flaw in its PostScript coders prior to versions 6.9.13-56 and 7.x before 7.1.2-31 . The root cause is the failure to properly sanitize, escape, or trim values written to output files. A remote attacker can supply crafted input values to e...
CVE-2026-105404
...
CVE-2026-105402
A flaw was found in ImageMagick before version 7.1.2-31 where a remote attacker could cause a Denial of Service (DoS) . By submitting an image containing a crafted Extensible Metadata Platform (XMP) profile, an error during numeric value calculation (specifically determining the numerator and den...
EUVD-2026-95007
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 allows a security policy bypass when a policy uses coder, rather than module, as its domain. An attacker can supply a crafted image to evade coder-based policy restrictions, causing ImageMagick to process formats the administrator intended to...
CVE-2026-105403
A security policy bypass vulnerability exists in ImageMagick versions before 6.9.13-56 and 7.x before 7.1.2-31 . The root cause is a flaw where policies using the coder domain, rather than the module domain, can be bypassed. An attacker can provide a crafted image to evade these restrictions, for...
CVE-2026-105402 ImageMagick before 7.1.2-31 Denial of Service via XMP Profile Parsing
ImageMagick before 7.1.2-31 contains a denial of service vulnerability that allows attackers to disrupt processing by supplying a crafted XMP profile. Attackers can embed a malicious XMP profile that triggers a failure when determining the numerator and denominator, crashing or hanging image...
CVE-2026-105402
Removed by vendor...
EUVD-2026-95006
ImageMagick before 7.1.2-31 contains a denial of service vulnerability that allows attackers to disrupt processing by supplying a crafted XMP profile. Attackers can embed a malicious XMP profile that triggers a failure when determining the numerator and denominator, crashing or hanging image...