Arbitrary Code Injection

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Arbitrary Code Injection

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the PostScript coders when certain values are not properly escaped or trimmed before being written to output. An attacker can execute arbitrary PostScript code by supplying crafted input values that are...

DEBIAN-CVE-2026-105404

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by...

CVE-2026-105404

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-105404 ImageMagick before 7.1.2-31 Code Injection via PostScript Coders

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by...

CVE-2026-105404

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by...

CVE-2026-105404

...

CVE-2026-105404

Removed by vendor...

EUVD-2026-95008

ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains a code injection vulnerability in its PostScript coders, because some values are not properly escaped or trimmed when written to output. Attackers can supply crafted values that embed arbitrary PostScript code into files generated by...

CVE-2026-105404

The ImageMagick software is vulnerable to a code injection flaw in its PostScript coders prior to versions 6.9.13-56 and 7.x before 7.1.2-31 . The root cause is the failure to properly sanitize, escape, or trim values written to output files. A remote attacker can supply crafted input values to e...

CVE-2026-105404

...

PT-2026-107980

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-56 ImageMagick versions prior to 7.1.2-31 Description Code injection is possible in the PostScript coders because certain values are not properly escaped or trimmed during output. This allows attackers to...

CVE-2026-106577

A flaw was found in ImageMagick. Due to improper input sanitization, unescaped or untrimmed values can result in code injection within output generated by PostScript coders. A remote attacker could supply specially crafted input to embed arbitrary code into the generated PostScript documents. Whe...

DEBIAN-CVE-2026-106577

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, unescaped or untrimmed values can inject code into output generated by PostScript coders. This issue is fixed in versions 7.1.2-31 and 6.9.13-56...

CVE-2026-106577

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, unescaped or untrimmed values can inject code into output generated by PostScript coders. This issue is fixed in versions 7.1.2-31 and 6.9.13-56...

CVE-2026-106577

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, unescaped or untrimmed values can inject code into output generated by PostScript coders. This issue is fixed in versions 7.1.2-31 and 6.9.13-56...

UBUNTU-CVE-2026-106577

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, unescaped or untrimmed values can inject code into output generated by PostScript coders. This issue is fixed in versions 7.1.2-31 and 6.9.13-56...

CVE-2026-106577 ImageMagick: Code Injection in the postscript coders

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, unescaped or untrimmed values can inject code into output generated by PostScript coders. This issue is fixed in versions 7.1.2-31 and 6.9.13-56...

CVE-2026-106577

The open-source image manipulation software ImageMagick is vulnerable to code injection in its PostScript coders. The root cause is the processing of unescaped or untrimmed values , which allows for the injection of code into the output generated by these coders. This vulnerability affects versio...