PT-2026-86790

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-30 ImageMagick versions prior to 6.9.13-55 Description A time-of-check-time-of-use TOCTOU issue exists in the video decoder. This allows attackers to bypass path policy write restrictions by swapping symlink...

CVE-2026-86421: Uncontrolled Resource Consumption

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service...

PT-2026-86786

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-30 ImageMagick versions prior to 6.9.13-55 Description An issue exists where the software fails to properly lower the memory budget when an operation inside the OpenPixelCache function fails. Repeatedly...

PT-2026-86787

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-30 ImageMagick versions prior to 6.9.13-55 Description A memory leak exists in the MSL image decoder. An attacker can use a specially crafted MSL image to trigger memory allocation without proper deallocatio...

Linux Distros Unpatched Vulnerability : CVE-2026-86420

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such...

Linux Distros Unpatched Vulnerability : CVE-2026-86424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use TOCTOU vulnerability in the video decoder that allows attackers to bypass path...

Linux Distros Unpatched Vulnerability : CVE-2026-86425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who supplies ...

The vulnerability of the PNG encoder in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.

The vulnerability of the PNG encoder in the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the module. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the console-based graphic editor ImageMagick, related to the lack of memory release after the effective lifespan, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the console-based graphic editor ImageMagick, related to integer overflow, allows a hacker to cause a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the “magnify” operation in the console-based image editing tool ImageMagick allows a hacker to execute arbitrary code.

The vulnerability of the “magnify” operation in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the PDB decoder in the console-based ImageMagick graphics editor allows a hacker to execute arbitrary code.

The vulnerability of the PDB console-based ImageMagick graphics editor relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the ASHLAR encoder in the console-based graphic editor ImageMagic allows a hacker to trigger a service failure.

The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to the lack of memory release after the effective lifespan of the encoder. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ASHLAR encoder in the console-based graphic editor ImageMagic, related to incorrect restrictions on the path name to the directory, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the console-based graphic editor ImageMagick, related to reading beyond the buffer in memory, allows a hacker to cause a system failure.

The vulnerability of the console-based graphic editor ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the FTXT encoder in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the FTXT encoder in the console-based image editing tool ImageMagick relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ImageMagick: Memory Leak when providing invalid options to the cli

A memory leak is possible when invalid options are passed to the cli magick...

GHSA-CVHV-G4RQ-3HMW ImageMagick: Memory Leak when providing invalid options to the cli

A memory leak is possible when invalid options are passed to the cli magick...

The vulnerability of the console-based graphic editor ImageMagick, related to the lack of memory release after the effective lifespan, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2026-70651

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height while loading a crafted multi-page TIFF through VipsForeignLoadMagick. The vulnerable calculations i...