349 matches found
MGASA-2026-0415 Updated graphicsmagick packages fix a security vulnerability
Integer overflows in MNG magnification. CVE-2025-55154...
Updated graphicsmagick packages fix a security vulnerability
Integer overflows in MNG magnification. CVE-2025-55154...
Astra Linux – Vulnerability in imagemagick
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, a missing check in the MNG encoder allowed the possibility of reading more images than the list limit allowed, resulting in excessive resource usage. This issue...
Astra Linux – Vulnerability in qtimageformats-opensource-src
A buffer overflow in Nomacs v3.15.0 allows attackers to cause a denial of service DoS attack through a specially crafted MNG file...
Security update for GraphicsMagick
This update for GraphicsMagick fixes the following issue: CVE-2025-55154: integer overflow when performing magnified size calculations in ReadOneMNGIMage can lead to out-of- bounds write bsc1248078. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like...
Astra Linux – Vulnerability in imagemagick
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, there was a stack buffer overflow vulnerability in the MNG encoder. There were missing bounds checks, which could allow the stack to be corrupted by...
Unity Linux 20.1070e Security Update: ImageMagick (UTSA-2026-099487)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099487 advisory. ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, the MNG decoder contains a...
The vulnerability of the MNG encoder in the console-based image editing tool ImageMagick allows a hacker to execute arbitrary code.
The vulnerability of the MNG encoder in the console-based image editing tool ImageMagick is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...
JLSEC-2026-1011 ImageMagick: Policy Bypass in MNG coder could
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder it would be possible to read more images than the list limit policy would allow resulting in excessive resource use...
JLSEC-2026-919 imagemagick: heap-buffer overflow read in MNG magnification with alpha
Vulnerability Details When performing image magnification in ReadOneMNGIMage in coders/png.c, there is an issue around the handling of images with separate alpha channels. When loading an image with a color type that implies a separate alpha channel ie. jngcolortype = 12, we will load the alpha...
JLSEC-2026-921 imagemagick: integer overflows in MNG magnification
Vulnerability Details The magnified size calculations in ReadOneMNGIMage in coders/png.c are unsafe and can overflow, leading to memory corruption. The source snippet below is heavily abbreviated due to the size of the function, but hopefully the important points are captured. c static Image...
JLSEC-2026-978 ImageMagick has stack write buffer overflow in MNG encoder
A stack buffer overflow vulnerability exists in the MNG encoder. There is a bounds checks missing that could corrupting the stack with attacker-controlled data. ==2265506==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7ffec4971310 at pc 0x55e671b8a072 bp 0x7ffec4970f70 sp...
EUVD-2026-41119
ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged...
ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged
In the MNG decoder there is a possible heap information disclosure because part of the pixels are left unchanged...
SUSE SLES15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:3023-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3023-1 advisory. This update for ImageMagick fixes the following issues - CVE-2026-42050: stack buffer overflow in XTileImage bsc1265048. -...
Security update for ImageMagick
This update for ImageMagick fixes the following issues CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read bsc1270073. CVE-2026-53467: allocated memory left unchanged in the MNG decoder can lead to a heap information disclosure...
Security update for ImageMagick
This update for ImageMagick fixes the following issues CVE-2026-42050: stack buffer overflow in XTileImage bsc1265048. CVE-2026-42326: information disclosure via malicious IPTC input file bsc1268092. CVE-2026-45031: denial of Service due to resource policy bypass in PSD decoder bsc1268094...
SUSE-SU-2026:3024-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-42050: stack buffer overflow in XTileImage bsc1265048. - CVE-2026-42326: information disclosure via malicious IPTC input file bsc1268092. - CVE-2026-45031: denial of Service due to resource policy bypass in PSD decoder bsc1268094. ...
MGASA-2026-0252 Updated imagemagick packages fix security vulnerabilities
The updated packages fix numerous security vulnerabilities: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797. CVE-2026-25797 Heap Buffer Underwrite in Floyd-Steinberg depth dithering. CVE-2026-48724 Infinite Loop in subimage-search with crafted image. CVE-2026-48733 Stack...
openSUSE 16: ImageMagick / ImageMagick-config-7-SUSE / etc (openSUSE-SU-2026:21291-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21291-1 advisory. This update for ImageMagick fixes the following issues - CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read...