4 matches found
EUVD-2026-94381
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICKSHREDPASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. This issue is fixed in...
CVE-2026-106566 ImageMagick: Policy Bypass in delegate symlink cleanup due to missing check
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICKSHREDPASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. This issue is fixed in...
CVE-2026-106566 ImageMagick: Policy Bypass in delegate symlink cleanup due to missing check
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICKSHREDPASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. This issue is fixed in...
CVE-2026-106566
The ImageMagick image manipulation software is vulnerable to a policy bypass in the delegate symlink cleanup process. Due to a missing check for the MAGICK_SHRED_PASSES environment variable, a local privileged workflow can be exploited to overwrite a file with random data. This issue is fixed in ...