CVE-2026-123273

Versions of ImageMagick before 7.1.2-35 and 6.9.13-60 are vulnerable to an infinite loop within the SVG decoder . The root cause is located in QueueAuthenticPixelCacheNexus in MagickCore/cache.c , which fails to validate the requested region's width and height. An attacker can provide a crafted S...