CentOS Linux 7 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc (CENTOS7:CLSA-2025:1764280893)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1764280893 advisory. - ImageMagick is an open source software suite for displaying, converting, and editing raster image files. In ImageMagick versions prior to 7.1.2...

Linux Distros Unpatched Vulnerability : CVE-2026-103118

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in GraphicsMagick up to 1.3.47. Affected by this vulnerability is the function ExtractPostscript of the file coders/wpg.c of the...

CVE-2026-103118

A vulnerability exists in GraphicsMagick up to version 1.3.47 within the WPG File Handler component. Specifically, the ExtractPostscript function in the file coders/wpg.c is susceptible to uncontrolled recursion when processing manipulated input. This issue can be triggered via a remote attack . ...

CVE-2026-102635

ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image...

DEBIAN-CVE-2026-102635

ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image...

CVE-2026-102635

ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image...

EUVD-2026-89030

ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image...

CVE-2026-102635

ImageMagick versions prior to 7.1.2-32 and 6.9.13-57 are vulnerable to an uninitialized heap memory disclosure within the GIF decoder's application extension handler in coders/gif.c. An attacker can craft a malicious GIF file that triggers the number parser to read uninitialized heap memory. This...

CVE-2026-102635 ImageMagick before 7.1.2-32 and 6.9.13-57 Uninitialized Heap Memory Disclosure in GIF Decoder

ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image...

CVE-2026-102635 ImageMagick before 7.1.2-32 and 6.9.13-57 Uninitialized Heap Memory Disclosure in GIF Decoder

ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image...

CVE-2026-102635 ImageMagick before 7.1.2-32 and 6.9.13-57 Uninitialized Heap Memory Disclosure in GIF Decoder

ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image...

Linux Distros Unpatched Vulnerability : CVE-2026-102635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in...

Astra Linux – Vulnerability in imagemagick

A heap use-after-free flaw was discovered in the coder/bmp.c file of ImageMagick...

The vulnerability in the coders/dcm.c module of the console-based image editing tool ImageMagick allows a hacker to cause a service failure.

The vulnerability in the coders/dcm.c module of the console-based image editing tool ImageMagick relates to reading data from beyond the allowed buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the WriteMSLImage() function in the coders/msl.c component of the console-based image editing tool ImageMagick allows a hacker to cause a service failure.

The vulnerability of the WriteMSLImage function in the coders/msl.c component of the console-based image editing tool ImageMagick is related to improper memory release before deleting the last reference. Exploiting this vulnerability may allow an attacker to cause a service failure...

CVE-2026-77118: Out-of-bounds Write

A heap out-of-bounds write exists in the Photo CD PCD decoder of GraphicsMagick. In DecodeImage coders/pcd.c, the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is...

JLSEC-2026-898

A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior...

JLSEC-2026-943 ImageMagick has memory leak in msl encoder

Memory leak exists in coders/msl.c. In the WriteMSLImage function of the msl.c file, resources are allocated. But the function returns early without releasing these allocated resources. ==78983== Memcheck, a memory error detector ==78983== Copyright C 2002-2022, and GNU GPL'd, by Julian Seward et...

JLSEC-2026-875

A heap based buffer overflow in coders/tiff.c may result in program crash and denial of service in ImageMagick before 7.0.10-45...

JLSEC-2026-947 ImageMagick: Code Injection via PostScript header in ps coders

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a...