92 matches found
CVE-2026-109265
The ImageMagick software versions 7.1.1-7 before 7.1.2-32 are vulnerable to a heap buffer over-read (CWE-125). The root cause is an incorrect string termination in XMP profiles , which allows an attacker to supply a crafted image with a malformed XMP profile to trigger the over-read and potential...
Linux Distros Unpatched Vulnerability : CVE-2026-105402
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-31 contains a denial of service vulnerability that allows attackers to disrupt processing by supplying a crafted XMP profile. Attackers...
CVE-2026-105825
A flaw was found in ImageMagick. This vulnerability allows a remote attacker to cause a denial of service DoS by submitting an image containing a specially crafted Extensible Metadata Platform XMP profile. Due to improper error handling during profile processing, the application terminates the...
CVE-2026-105402
A flaw was found in ImageMagick. A remote attacker could cause a Denial of Service DoS by submitting an image containing a crafted Extensible Metadata Platform XMP profile. When parsing the malicious metadata, an error during numeric value calculation causes the application to hang or crash,...
CVE-2026-105402
Rejected reason: This CVE ID has been rejected as a duplicate...
CVE-2026-105825
Removed by vendor...
EUVD-2026-95006
ImageMagick before 7.1.2-31 contains a denial of service vulnerability that allows attackers to disrupt processing by supplying a crafted XMP profile. Attackers can embed a malicious XMP profile that triggers a failure when determining the numerator and denominator, crashing or hanging image...
CVE-2026-105402
A flaw was found in ImageMagick before version 7.1.2-31 where a remote attacker could cause a Denial of Service (DoS) . By submitting an image containing a crafted Extensible Metadata Platform (XMP) profile, an error during numeric value calculation (specifically determining the numerator and den...
CVE-2026-105402
Removed by vendor...
PT-2026-107978
ImageMagick before 7.1.2-31 contains a denial of service vulnerability that allows attackers to disrupt processing by supplying a crafted XMP profile. Attackers can embed a malicious XMP profile that triggers a failure when determining the numerator and denominator, crashing or hanging image...
CVE-2026-107208
A flaw was found in ImageMagick. When processing a specially crafted Extensible Metadata Platform XMP profile, the software triggers an internal recursion limit that is handled as a fatal condition rather than a standard exception. A remote attacker can exploit this vulnerability by submitting a...
CVE-2026-106576
A flaw was found in ImageMagick. A remote attacker can cause a Denial of Service DoS by submitting an image containing a specially crafted Extensible Metadata Platform XMP profile. When ImageMagick processes the profile, calculating the numerator and denominator of a rational value triggers...
CVE-2026-106568
A flaw was found in ImageMagick. A remote attacker could submit a specially crafted image containing a malformed Extensible Metadata Platform XMP profile, causing the parser to enter an infinite loop during processing. Successful exploitation can result in a Denial of Service DoS by hanging the...
DEBIAN-CVE-2026-107208
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processing process. This...
CVE-2026-107208
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processing process. This...
DEBIAN-CVE-2026-106576
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted XMP profile can trigger excessive work while the parser determines a rational value's numerator and denominator, causing denial of service. This issue is fixed in version...
CVE-2026-106576
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted XMP profile can trigger excessive work while the parser determines a rational value's numerator and denominator, causing denial of service. This issue is fixed in version...
DEBIAN-CVE-2026-106568
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop, preventing image processing from completing. This issue is fixed in...