19993 matches found
CVE-2026-105403
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 allows a security policy bypass when a policy uses coder, rather than module, as its domain. An attacker can supply a crafted image to evade coder-based policy restrictions, causing ImageMagick to process formats the administrator intended to...
CVE-2026-105403
...
EUVD-2026-95007
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 allows a security policy bypass when a policy uses coder, rather than module, as its domain. An attacker can supply a crafted image to evade coder-based policy restrictions, causing ImageMagick to process formats the administrator intended to...
CVE-2026-105403 ImageMagick before 7.1.2-31 Security Policy Bypass via Coder Domain
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 allows a security policy bypass when a policy uses coder, rather than module, as its domain. An attacker can supply a crafted image to evade coder-based policy restrictions, causing ImageMagick to process formats the administrator intended to...
CVE-2026-105403
A security policy bypass vulnerability exists in ImageMagick versions before 6.9.13-56 and 7.x before 7.1.2-31 . The root cause is a flaw where policies using the coder domain, rather than the module domain, can be bypassed. An attacker can provide a crafted image to evade these restrictions, for...
CVE-2026-105403
Removed by vendor...
CVE-2026-105402
Removed by vendor...
EUVD-2026-95004
ImageMagick before 7.1.2-31 contains a resource leak vulnerability that allows attackers to leave file pointers open by supplying a crafted magick script. Attackers can process malicious magick scripts to leak file descriptors, potentially exhausting resources and causing denial of service...
CVE-2026-105400 ImageMagick before 7.1.2-31 Unclosed File Pointer via Magick Script
ImageMagick before 7.1.2-31 contains a resource leak vulnerability that allows attackers to leave file pointers open by supplying a crafted magick script. Attackers can process malicious magick scripts to leak file descriptors, potentially exhausting resources and causing denial of service...
CVE-2026-105401
A heap buffer overflow vulnerability exists in ImageMagick versions prior to 7.1.2-31 within the distributed pixel cache server . A connecting client can transmit crafted data to trigger an integer-size calculation error , leading to a heap memory overwrite. This flaw can crash the server, result...
CVE-2026-105400
A flaw in ImageMagick before version 7.1.2-31 allows a resource leak vulnerability. By submitting a specially crafted magick script , an attacker can cause the application to fail to properly close open file handles. Repeated execution of such a script can exhaust available system file descriptor...
CVE-2026-105401 ImageMagick before 7.1.2-31 Heap Buffer Overflow in Distributed Pixel Cache Server
ImageMagick before 7.1.2-31 contains a heap buffer overflow vulnerability in the distributed pixel cache server that allows connecting clients to overwrite heap memory by sending crafted data. Attackers can connect to the distributed pixel cache server and transmit malicious data to trigger a hea...
CVE-2026-105400
...
EUVD-2026-95005
ImageMagick before 7.1.2-31 contains a heap buffer overflow vulnerability in the distributed pixel cache server that allows connecting clients to overwrite heap memory by sending crafted data. Attackers can connect to the distributed pixel cache server and transmit malicious data to trigger a hea...
CVE-2026-105400
Removed by vendor...