2742 matches found
CLSA-2026-1790065439 Fix CVE(s): CVE-2026-56378
SECURITY UPDATE: heap out-of-bounds read in the PCD decoder - debian/patches/CVE-2026-56378.patch: bound q against the end of the luma, chroma1 or chroma2 plane it currently points into before the delta is read in DecodeImage in coders/pcd.c, and raise CorruptImage when that bound was reached -...
CLSA-2026-1789565568 Fix CVE(s): CVE-2026-86421
SECURITY UPDATE: memory leak in the MSL group handler - debian/patches/CVE-2026-86421.patch: destroy the per-level DrawInfo in the unwind of MSLEndElement. The unwind released the image, the attributes and the imageinfo of every level it popped, but never the DrawInfo that MSLPushImage clones for...
CLSA-2026-1789486747 Fix CVE(s): CVE-2026-86421
SECURITY UPDATE: memory leak in the MSL decoder on group end tags - debian/patches/CVE-2026-86421.patch: destroy drawinfo for each grouped image in the group cleanup loop in MSLEndElement in coders/msl.c - debian/patches/CVE-2026-86421-1.patch: bound the group cleanup loop on mslinfo-n in...
CLSA-2026-1789399498 ImageMagick: Fix of 2 CVEs
CVE-2026-86421: destroy the per-level drawinfo clone when popping a in MSLEndElement coders/msl.c to fix a memory leak - CVE-2026-86423: track already-seen images in a seen array in GetList PerlMagick so a non-adjacent repeat is cloned, fixing a use-after-free...
CLSA-2026-1789475395 Fix CVE(s): CVE-2026-86420, CVE-2026-86421
SECURITY UPDATE: memory budget exhaustion when the pixel cache allocation fails - debian/patches/CVE-2026-86420.patch: relinquish the MemoryResource budget when the pixel allocation fails in OpenPixelCache in magick/cache.c - CVE-2026-86420 SECURITY UPDATE: memory leak in the MSL decoder on group...
CLSA-2026-1789467564 ImageMagick: Fix of 2 CVEs
Rebase to EPEL 8 ImageMagick-6.9.13.52-2.el8, picking up the vendor's upstream soname-revert patch - Drop the TuxCare backports for CVE-2026-61857, CVE-2026-61861, CVE-2026-61863, CVE-2026-61866 and CVE-2026-61870: all five are fixed in the 6.9.13.52 tarball, verified against the extracted source...
CLSA-2026-1789467419 ImageMagick: Fix of 2 CVEs
Rebase to EPEL 8 ImageMagick-6.9.13.52-2.el8, picking up the vendor's upstream soname-revert patch - Drop the TuxCare backports for CVE-2026-61857, CVE-2026-61861, CVE-2026-61863, CVE-2026-61866 and CVE-2026-61870: all five are fixed in the 6.9.13.52 tarball, verified against the extracted source...
CLSA-2026-1789467169 ImageMagick: Fix of 2 CVEs
Rebase to EPEL 8 ImageMagick-6.9.13.52-2.el8, picking up the vendor's upstream soname-revert patch - Drop the TuxCare backports for CVE-2026-61857, CVE-2026-61861, CVE-2026-61863, CVE-2026-61866 and CVE-2026-61870: all five are fixed in the 6.9.13.52 tarball, verified against the extracted source...
CLSA-2026-1789467167 ImageMagick: Fix of 2 CVEs
Rebase to EPEL 8 ImageMagick-6.9.13.52-2.el8, picking up the vendor's upstream soname-revert patch - Drop the TuxCare backports for CVE-2026-61857, CVE-2026-61861, CVE-2026-61863, CVE-2026-61866 and CVE-2026-61870: all five are fixed in the 6.9.13.52 tarball, verified against the extracted source...
CLSA-2026-1789398771 ImageMagick: Fix of 2 CVEs
CVE-2026-86421: destroy the per-level drawinfo clone when popping a in MSLEndElement coders/msl.c to fix a memory leak - CVE-2026-86423: track already-seen images in a seen array in GetList PerlMagick so a non-adjacent repeat is cloned, fixing a use-after-free...
Astra Linux – Vulnerability in imagemagick
A heap use-after-free flaw was discovered in the coder/bmp.c file of ImageMagick...
ImageMagick coders/dcm.c Heap Buffer Overflow DoS
The vulnerability in the coders/dcm.c module of the console-based image editing tool ImageMagick relates to reading data from beyond the allowed buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
ImageMagick WriteMSLImage Heap Buffer Overflow DoS
The vulnerability of the WriteMSLImage function in the coders/msl.c component of the console-based image editing tool ImageMagick is related to improper memory release before deleting the last reference. Exploiting this vulnerability may allow an attacker to cause a service failure...
CVE-2026-77118
A heap out-of-bounds write exists in the Photo CD PCD decoder of GraphicsMagick. In DecodeImage coders/pcd.c, the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is...
CVE-2026-77118: Out-of-bounds Write
A heap out-of-bounds write exists in the Photo CD PCD decoder of GraphicsMagick. In DecodeImage coders/pcd.c, the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is...
CVE-2026-77118: Out-of-bounds Write
A heap out-of-bounds write exists in the Photo CD PCD decoder of GraphicsMagick. In DecodeImage coders/pcd.c, the Huffman delta loop advances its output pointer with q++ after every decoded delta and never checks it against the end of the heap-allocated luma/chroma plane buffers. The pointer is...
CLSA-2026-1786552804 ImageMagick: Fix of 2 CVEs
CVE-2026-61868: relinquish scanline and destroy chromaimage on blob open failure in ReadYUVImage coders/yuv.c to fix a memory leak - CVE-2026-61869: destroy quantuminfo before throwing on pixel and colormap allocation failure in WriteMIFFImage coders/miff.c to fix a memory leak...
CLSA-2026-1786553061 ImageMagick: Fix of 2 CVEs
CVE-2026-61868: relinquish scanline and destroy chromaimage on blob open failure in ReadYUVImage coders/yuv.c to fix a memory leak - CVE-2026-61869: destroy quantuminfo before throwing on pixel and colormap allocation failure in WriteMIFFImage coders/miff.c to fix a memory leak...
