19908 matches found
PT-2026-86788
ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. Attackers can swap symlinks between policy validation and file access to read or...
Linux Distros Unpatched Vulnerability : CVE-2026-86425
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who supplies ...
CVE-2026-86421: Uncontrolled Resource Consumption
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service...
CVE-2026-86423: Use After Free
ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the GetList method can trigger the use-after-free, resulting in a crash denial of service...
PT-2026-86790
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-30 ImageMagick versions prior to 6.9.13-55 Description A time-of-check-time-of-use TOCTOU issue exists in the video decoder. This allows attackers to bypass path policy write restrictions by swapping symlink...
PT-2026-86791
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-30 ImageMagick versions prior to 6.9.13-55 Description A heap-use-after-free issue exists in the Layer method of PerlMagick. This occurs when an attacker provides a specially crafted list of images, triggeri...
CVE-2026-86424: Improper Link Resolution Before File Access
ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use TOCTOU vulnerability in the video decoder that allows attackers to bypass path policy write restrictions via symlink swaps. An attacker can replace a symlink between policy validation check-time and the file write...
PT-2026-86787
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-30 ImageMagick versions prior to 6.9.13-55 Description A memory leak exists in the MSL image decoder. An attacker can use a specially crafted MSL image to trigger memory allocation without proper deallocatio...
Linux Distros Unpatched Vulnerability : CVE-2026-86424
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use TOCTOU vulnerability in the video decoder that allows attackers to bypass path...
ImageMagick PDB Decoder Code Execution
The vulnerability of the PDB console-based ImageMagick graphics editor relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
ImageMagic ASHLAR Encoder DoS
The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to the lack of memory release after the effective lifespan of the encoder. Exploiting this vulnerability can allow an attacker to cause a service failure...
ImageMagick PNG Encoder DoS
The vulnerability of the PNG encoder in the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the module. Exploiting this vulnerability can allow an attacker to cause a service failure...
ImageMagick magnify Code Execution
The vulnerability of the “magnify” operation in the console-based image editing tool ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ImageMagick Buffer Overflow DoS
The vulnerability of the console-based graphic editor ImageMagick is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
ImageMagick Integer Overflow DoS
The vulnerability of the console-based graphic editor ImageMagick is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...
ImageMagick Memory Leak DoS
The vulnerability of the console-based graphic editor ImageMagick is related to the lack of memory release after the effective lifespan of the software. Exploiting this vulnerability can allow an attacker to cause a service failure...
ImageMagick FTXT Encoder DoS
The vulnerability of the FTXT encoder in the console-based image editing tool ImageMagick relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ImageMagic ASHLAR Path Traversal
The vulnerability of the ASHLAR encoder in the console-based ImageMagick graphics editor is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
