CVE-2026-106564 ImageMagick: Heap Buffer Over-Write in EXR decoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash. This issue is fixed in version 7.1.2-32...

CVE-2026-106564

The open-source image processing software ImageMagick is vulnerable to a Heap Buffer Over-Write in its EXR decoder . Specifically, processing a crafted EXR image can cause the decoder to write beyond the heap buffer, leading to a process crash . This issue affects versions prior to 7.1.2-32 . The...

CVE-2026-106564

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash. This issue is fixed in version 7.1.2-32...

CVE-2026-106564 ImageMagick: Heap Buffer Over-Write in EXR decoder

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash. This issue is fixed in version 7.1.2-32...

ROOT-OS-DEBIAN-12-CVE-2026-86421 CVE-2026-86421 in imagemagick - Patched by Root

Root has patched CVE-2026-86421 in the imagemagick package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-62946 CVE-2026-62946 in imagemagick - Patched by Root

Root has patched CVE-2026-62946 in the imagemagick package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-86420 CVE-2026-86420 in imagemagick - Patched by Root

Root has patched CVE-2026-86420 in the imagemagick package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-61861 CVE-2026-61861 in imagemagick - Patched by Root

Root has patched CVE-2026-61861 in the imagemagick package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-66011 CVE-2026-66011 in imagemagick - Patched by Root

Root has patched CVE-2026-66011 in the imagemagick package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-62343 CVE-2026-62343 in imagemagick - Patched by Root

Root has patched CVE-2026-62343 in the imagemagick package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2023-34152 CVE-2023-34152 in imagemagick - Patched by Root

Root has patched CVE-2023-34152 in the imagemagick package for Root:Debian:12. Multiple fixed versions available...

CVE-2026-106577: Improper Control of Generation of Code

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, unescaped or untrimmed values can inject code into output generated by PostScript coders. This issue is fixed in versions 7.1.2-31 and 6.9.13-56...

CVE-2026-106570: Uncontrolled Resource Consumption

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of service. This issue is...

PT-2026-107551

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-32 ImageMagick versions prior to 6.9.13-57 Description A crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop, which prevents the image processing from completing...

PT-2026-107560

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-31 ImageMagick versions prior to 6.9.13-56 Description Unescaped or untrimmed values can allow code injection into the output generated by PostScript coders, which are components used to encode images into t...

CVE-2026-106580: Improper Access Control

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue ...

PT-2026-107572

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-30 ImageMagick versions prior to 6.9.13-55 Description When built without Cairo support, the RSVG decoder can be triggered to free image state twice and subsequently use that freed memory when processing a...

CVE-2026-106572: Uncontrolled Recursion

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process. This issue is fixed in versions...

CVE-2026-107210: Improper Handling of Highly Compressed Data (Data Amplification)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit, bypassing resource restrictions a...

PT-2026-107573

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-30 ImageMagick versions prior to 6.9.13-55 Description A flaw in the MAT decoder allows a specially crafted, highly compressed MAT image to trigger the creation of temporary files that exceed the configured...