SUSE CVE-2025-69204

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, in the WriteSVGImage function, using an int variable to store numberattributes caused an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack...

PT-2026-24123

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 Description ImageMagick is software used for editing and manipulating digital images. A flaw exists in the SIXEL decoder that allows an attacker to cause an out-of-bounds write through a specially crafted...

PT-2026-24130

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 Description ImageMagick is software used for editing and manipulating digital images. A flaw exists in the JBIG decoder due to a missing check, leading to an...

PT-2026-24140

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 Description ImageMagick is software used for editing and manipulating digital images. A heap buffer over-read exists in the BilateralBlurImage function due to an incorrect conversion when processing a...

PT-2026-24124

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 Description ImageMagick is software used for editing and manipulating digital images. A stack buffer overflow exists in the morphology kernel parsing functions...

PT-2026-24139

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 Description ImageMagick is software used for editing and manipulating digital images. A heap-based buffer overflow exists in the UHDR encoder due to truncation of a value, which could allow an out-of-boun...

PT-2026-24133

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 Description ImageMagick is software used for editing and manipulating digital images. A heap overflow can occur when encoding a PNG image due to an extremely large...

PT-2026-24138

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 Description ImageMagick is software used for editing and manipulating digital images. A stack buffer overflow can occur in the MagnifyImage function when processing...

Debian: Security Advisory (DLA-4429-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2026-28491

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-18 ImageMagick versions prior to 6.9.13-43 Description ImageMagick is free and open-source software used for editing and manipulating digital images. Due to an incorrect return value on certain platforms, a...

PT-2026-24142

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 Description ImageMagick is software used for editing and manipulating digital images. A 32-bit unsigned integer overflow in the XWD encoder can lead to an undersize...

PT-2026-28490

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-18 ImageMagick versions prior to 6.9.13-43 Description ImageMagick is software used for editing and manipulating digital images. A flaw exists where a zero-byte out-of-bounds write occurs in the X11 display...

PT-2026-24131

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41 Description ImageMagick is software used for editing and manipulating digital images. A heap over-read issue exists in the MAT decoder due to incorrect...

[SECURITY] [DLA 4429-1] imagemagick security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4429-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès December 31, 2025 https://wiki.debian.org/LTS -...

DLA-4429-1 imagemagick - security update

Bulletin has no description...

Debian dla-4429 : imagemagick - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4429 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4429-1 [email protected]...

ImageMagick's failure to limit MVG mutual causes Stack Overflow

Summary Magick fails to check for circular references between two MVGs, leading to a stack overflow. Details After reading mvg1 using Magick, the following is displayed: ./magick -limit memory 2GiB -limit map 2GiB -limit disk 0 mvg:L1.mvg out.png AddressSanitizer:DEADLYSIGNAL...

Uncontrolled Recursion

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the SVGStartElement and ResizeQuantumMemory functions. An attacker can cause application crashes or resource exhaustion by submitting SVG files that trigger excessive memory allocation. PoC 1. Generate an SVG...

ImageMagick's failure to limit the depth of SVG file reads caused a DoS attack

Summary Using Magick to read a malicious SVG file resulted in a DoS attack. Details bt obtained using gdb: 4 0x0000555555794c9c in ResizeMagickMemory memory=0x7fffee203800, size=391344 at MagickCore/memory.c:1443 5 0x0000555555794e5a in ResizeQuantumMemory memory=0x7fffee203800, count=48918,...