CVE-2026-106573

A flaw was found in ImageMagick. A missing limit check in the Magick Vector Graphics MVG decoder allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted image file. Processing this malicious input triggers an excessively long-running operation that exhausts syst...

CVE-2026-106572

A flaw was found in ImageMagick. A remote attacker can trigger a Denial of Service DoS by submitting a specially crafted Continuous Acquisition and Life-cycle Support CALS raster image for processing. Due to a missing recursion depth limit in the CALS decoder, parsing the malicious file exhausts...

CVE-2026-106571

A flaw was found in ImageMagick. A local attacker can cause a Denial of Service DoS by issuing a specially crafted call to the GetVirtualPixels function. An integer calculation error allows data to be written beyond allocated heap memory boundaries, resulting in an unexpected process crash...

CVE-2026-106570

A flaw was found in ImageMagick. An unauthenticated attacker on an adjacent network can cause a Denial of Service DoS by repeatedly establishing connections to the distributed pixel cache server. This behavior exhausts the pool of available connections, preventing legitimate clients from accessin...

CVE-2026-106569

A flaw was found in ImageMagick. Missing validation and resource checks in the ASE image decoder allow a remote attacker to submit a specially crafted ASE image file. Processing this file can lead to an application crash or excessive processing time, resulting in a Denial of Service DoS...

CVE-2026-106568

A flaw was found in ImageMagick. A remote attacker could submit a specially crafted image containing a malformed Extensible Metadata Platform XMP profile, causing the parser to enter an infinite loop during processing. Successful exploitation can result in a Denial of Service DoS by hanging the...

CVE-2026-106567

A flaw was found in ImageMagick. An attacker can cause a Denial of Service DoS by providing a specially crafted Photoshop Document PSD file for processing. Due to an integer-conversion error in the PSD decoder on 32-bit systems, the application enters an infinite loop, causing it to hang and beco...

CVE-2026-106566

A flaw was found in ImageMagick. During the cleanup of temporary symbolic links symlinks used by delegate programs, the application fails to properly check the MAGICKSHREDPASSES environment variable. A local privileged user can exploit this vulnerability to overwrite files with random data,...

CVE-2026-106565

A flaw was found in ImageMagick. A remote attacker could trigger a Denial of Service DoS by providing a specially crafted bzip2-compressed image file. Due to a missing End-of-File EOF check during image decompression, the application can enter an infinite loop, exhausting system resources and...

CVE-2026-106564

A flaw was found in ImageMagick. A remote attacker can cause a Denial of Service DoS by providing a specially crafted OpenEXR EXR image file. Due to improper bounds checking in the EXR decoder, processing the image causes the application to write beyond the allocated memory buffer and crash...

Infinite loop

Overview Affected versions of this package are vulnerable to Infinite loop through the profile parser when processing a specially crafted XMP profile. An attacker can cause the application to enter an infinite loop and exhaust system resources by submitting a malicious image file. Remediation A f...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following in the delegate process when symlink cleanup does not properly check the MAGICKSHREDPASSES environment variable. An attacker can overwrite arbitrary files with random data by leveraging a local...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS through the MVG decoder process. An attacker can cause excessive resource consumption by submitting a specially crafted MVG image. Details Denial of Service DoS describes a family of attacks, all aimed at making a...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound through the GetVirtualPixels function. An attacker can cause a crash of the server process by supplying crafted input that triggers an integer calculation error, resulting in a heap buffer write beyond...

Missing Release of File Descriptor or Handle after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of File Descriptor or Handle after Effective Lifetime in the magick script. An attacker can cause resource exhaustion by repeatedly processing crafted scripts that leave file pointers unclosed, eventually exhausting...

Free of Memory not on the Heap

Overview Affected versions of this package are vulnerable to Free of Memory not on the Heap through the MVG decoder process. An attacker can cause a crash of the process by submitting a specially crafted image file. Remediation A fix was pushed into the master branch but not yet published...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via repeated connections to the distributed pixel cache server. An attacker can exhaust available connections by continuously initiating new connections from an adjacent network, resulting in service disruption...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the XMP profile parser. An attacker can cause excessive resource consumption by submitting a specially crafted XMP profile that triggers intensive processing when determining rational values. Details Denial of...

Incorrect Behavior Order: Authorization Before Parsing and Canonicalization

Overview Affected versions of this package are vulnerable to Incorrect Behavior Order: Authorization Before Parsing and Canonicalization via the coder process. An attacker can access data that should be restricted by supplying a specially crafted image file. Remediation A fix was pushed into the...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass due to a missing security-policy check in the CUT encoder. An attacker can read data that should be denied by policy and cause a crash by performing a crafted local encoding operation. Remediation A fix was pushed...