31 matches found
CLSA-2026-1785334645 ImageMagick: Fix of CVE-2026-61866
CVE-2026-61866: free jpegimage/jpegimageinfo on the JNG encoder's JPEG-alpha OpenBlob-failure path WriteOneJNGImage in coders/png.c, backporting upstream 353e2604, to prevent a memory leak...
CLSA-2026-1785334600 ImageMagick: Fix of CVE-2026-61866
CVE-2026-61866: free jpegimage/jpegimageinfo on the JNG encoder's JPEG-alpha OpenBlob-failure path WriteOneJNGImage in coders/png.c, backporting upstream 353e2604, to prevent a memory leak...
CLSA-2026-1785334393 ImageMagick: Fix of CVE-2026-61866
CVE-2026-61866: free jpegimage/jpegimageinfo on the JNG encoder's JPEG-alpha OpenBlob-failure path WriteOneJNGImage in coders/png.c, backporting upstream 353e2604, to prevent a memory leak...
CLSA-2026-1785308685 ImageMagick: Fix of CVE-2026-61866
CVE-2026-61866: free jpegimage/jpegimageinfo on the JNG encoder's JPEG-alpha OpenBlob-failure path WriteOneJNGImage in coders/png.c, backporting upstream 353e2604, to prevent a memory leak...
CLSA-2026-1784808556 ImageMagick: Fix of CVE-2026-61866
CVE-2026-61866: fix a memory leak CWE-401 in the JNG encoder WriteOneJNGImage when the blob for the grayscale JPEG alpha channel cannot be opened...
CLSA-2026-1784810162 ImageMagick: Fix of CVE-2026-61866
CVE-2026-61866: fix a memory leak CWE-401 in the JNG encoder WriteOneJNGImage when the blob for the grayscale JPEG alpha channel cannot be opened...
CLSA-2026-1784809847 ImageMagick: Fix of CVE-2026-61866
CVE-2026-61866: fix a memory leak CWE-401 in the JNG encoder WriteOneJNGImage when the blob for the grayscale JPEG alpha channel cannot be opened...
CLSA-2026-1784719414 Fix CVE(s): CVE-2026-61866
SECURITY UPDATE: memory leak in the JNG encoder on blob open failure - debian/patches/CVE-2026-61866.patch: destroy jpegimage and jpegimageinfo when OpenBlob fails in WriteOneJNGImage in coders/png.c - CVE-2026-61866...
CLSA-2026-1784621612 Fix CVE(s): CVE-2025-43965, CVE-2026-61866
SECURITY UPDATE: memory leak in the JNG encoder when opening the alpha blob fails - debian/patches/CVE-2026-61866.patch: destroy the cloned jpegimage and jpegimageinfo before raising the writer exception in WriteOneJNGImage in coders/png.c - CVE-2026-61866...
CLSA-2026-1777976295 Fix CVE(s): CVE-2026-28690
SECURITY UPDATE: stack buffer overflow in MNG/JNG encoder — missing NULL check after ImageToBlob in WriteOneJNGImage could propagate a NULL blob pointer into later stack buffer operations GHSA-7h7q-j33q-hvpf. - debian/patches/CVE-2026-28690.patch: bail out of WriteOneJNGImage when ImageToBlob...
CLSA-2026-1777542477 Fix CVE(s): CVE-2026-28690
SECURITY UPDATE: stack buffer overflow in MNG/JNG encoder — missing NULL check after ImageToBlob in WriteOneJNGImage could propagate a NULL blob pointer into later stack buffer operations GHSA-7h7q-j33q-hvpf. - debian/patches/CVE-2026-28690.patch: bail out of WriteOneJNGImage when ImageToBlob...
Stack-based Buffer Overflow
Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Stack-based Buffer Overflow
Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...
Stack-based Buffer Overflow
Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Stack-based Buffer Overflow
Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Stack-based Buffer Overflow
Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Stack-based Buffer Overflow
Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...
Stack-based Buffer Overflow
Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Stack-based Buffer Overflow
Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...
Stack-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Stack-based Buffer Overflow in WriteOneJNGImage in the MNG encoder. An attacker can cause stack corruption. Workaround This vulnerability can be mitigated by disabling the vulnerable encoder by adding to the policy.xml file. Remediation...