CVE-2026-116143

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allows the security policy's list length limit on scene selection to be circumvented. Attackers supplying a specific argument can cause ImageMagick to process more scenes than...

CVE-2026-116143

A flaw was found in ImageMagick. This vulnerability allows a local attacker to cause a Denial of Service DoS through resource exhaustion. The PostScript PS, Portable Document Format PDF, and XML Paper Specification XPS decoders fail to properly enforce security policy list length limits on scene...

CVE-2026-116143

The ImageMagick library versions before 6.9.13-58 and 7.x before 7.1.2-33 are vulnerable to a policy bypass within the PS, PDF, and XPS decoders . This flaw allows an attacker providing a specific argument to circumvent the security policy's list length limit on scene selection , forcing the soft...

EUVD-2026-109404

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allows the security policy's list length limit on scene selection to be circumvented. Attackers supplying a specific argument can cause ImageMagick to process more scenes than...

CVE-2026-116143 ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Policy Bypass in PS, PDF and XPS Decoders

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allows the security policy's list length limit on scene selection to be circumvented. Attackers supplying a specific argument can cause ImageMagick to process more scenes than...