CLSA-2026-1789486747 Fix CVE(s): CVE-2026-86421

SECURITY UPDATE: memory leak in the MSL decoder on group end tags - debian/patches/CVE-2026-86421.patch: destroy drawinfo for each grouped image in the group cleanup loop in MSLEndElement in coders/msl.c - debian/patches/CVE-2026-86421-1.patch: bound the group cleanup loop on mslinfo-n in...

PT-2026-76328

Summary NULL pointer dereference in MSL Magick Scripting Language parser when processing tag before any image is loaded. Version - ImageMagick 7.x tested on current main branch - Commit: HEAD Steps to Reproduce Method 1: Using ImageMagick directly bash magick MSL:poc.msl out.png Method 2: Using...

ROS-20260622-73-0057

The vulnerability of the MSLEndElement function in the ImageMagick console graphics editor’s coders/msl.c component is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260622-73-0056

The vulnerability of the MSLEndElement function in the ImageMagick console graphics editor’s coders/msl.c component is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

graphicsmagick:coder_MSL_fuzzer: Heap-buffer-overflow in MSLEndElement

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4819088761815040 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMSLfuzzer Job Type: libfuzzerasani386graphicsmagick Platform Id: linux Crash Type: Heap-buffer-overflow READ...

graphicsmagick:coder_MSL_fuzzer: Use-of-uninitialized-value in MSLEndElement

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5739753327689728 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderMSLfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...