18 matches found
CVE-2026-86420
ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service...
CVE-2026-86420
ImageMagick versions prior to 7.1.2-30 and 6.9.13-55 contain a denial-of-service vulnerability in the OpenPixelCache component. When an operation inside OpenPixelCache fails, the memory budget is not properly lowered. Repeated triggering of such failures can exhaust the process memory budget, res...
EUVD-2026-72378
ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service...
PT-2026-86786
ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service...
SUSE-SU-2026:3219-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2026-55628: policy bypass in concatenate operation due to missing checks bsc1270081. - CVE-2026-56362: heap buffer overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache bsc1271100. - CVE-2026-56366:...
SUSE CVE-2026-56362
ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting a...
CVE-2026-56362
A heap-buffer-overflow read in ImageMagick's OpenPixelCache occurs when image channel metadata updates before memory allocation. Attackers can trigger this via memory and disk allocation failures to disclose sensitive information. Mitigation Isolate ImageMagick tasks by running them inside...
DEBIAN-CVE-2026-56362
ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting a...
CVE-2026-56362 ImageMagick - Heap-buffer-overflow Read in GetPixelIndex via OpenPixelCache Metadata Desynchronization
ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting a...
CVE-2026-56362
CVE-2026-56362 affects ImageMagick prior to 7.1.2-15 with a heap-buffer-overflow read in GetPixelIndex caused by OpenPixelCache updating image channel metadata before memory allocation. Multiple sources (NVD, Red Hat, Debian security tracker, Alpine, CIRCL, PT Security, Luke/Snyk feeds) corrobora...
EUVD-2026-42259
ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory allocation. Attackers can trigger memory and disk allocation failures to cause a heap-buffer-overflow read affecting a...
EUVD-2017-3364
Malware in sbrugna...
SUSE CVE-2017-11754
The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service memory leak via a crafted file that is mishandled in an OpenPixelCache call...
The vulnerability of the WritePICONImage function in the coder/xpm.c file of the console-based graphic editor ImageMagick allows a hacker to cause a system failure.
The vulnerability of the WritePICONImage function in the coder/xpm.c file of the console-based graphic editor ImageMagick arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure loss of...
CVE-2017-11754
The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service memory leak via a crafted file that is mishandled in an OpenPixelCache call...
Memory corruption
The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service memory leak via a crafted file that is mishandled in an OpenPixelCache call...
CVE-2017-11754
The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service memory leak via a crafted file that is mishandled in an OpenPixelCache call...
CVE-2017-11754
The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service memory leak via a crafted file that is mishandled in an OpenPixelCache call...