CVE-2026-109264

A flaw was found in ImageMagick. An attacker who controls a file name processed by the application can cause a Denial of Service DoS by crashing the process. This issue is caused by uncontrolled recursion within the Magick Vector Graphics MVG decoder, which exhausts available stack memory when...

CVE-2026-109268

A flaw was found in ImageMagick. A remote attacker can exploit this issue by providing a specially crafted CMYK image that is processed into a PDF document using JPEG2000 compression. This causes the PDF writer to access previously released memory a use-after-free condition, which can crash the...

CVE-2026-109261

A flaw was found in ImageMagick. A remote attacker can cause a Denial of Service DoS by providing specially crafted images for GIF conversion that cause color quantization to fail. Because allocated memory is not freed when this failure occurs, repeated processing requests continuously leak memor...

CVE-2026-109260

A flaw was found in ImageMagick. A memory leak in the PNG encoder allows a remote attacker to cause a Denial of Service DoS. When library initialization fails during PNG encoding operations, allocated memory is not released. By repeatedly triggering these failed encoding requests, an attacker can...

CVE-2026-109263

A flaw was found in ImageMagick. The YUV image encoder fails to properly release allocated memory when an internal operation fails during image processing. A remote attacker can exploit this vulnerability by submitting specially crafted input, resulting in memory exhaustion and a potential Denial...

CVE-2026-109281

A flaw was found in ImageMagick. An attacker can trigger a heap buffer over-read by providing a specially crafted -fx expression for processing. This vulnerability allows the application to read memory beyond allocated boundaries, potentially leading to unauthorized information disclosure or a...

CVE-2026-109276

A flaw was found in ImageMagick. A remote attacker can cause a Denial of Service DoS by submitting crafted JPEG Network Graphics JNG images for processing. The JNG decoder fails to remove temporary files during the handling of these inputs, leading to excessive disk space consumption...

CVE-2026-109275

A flaw was found in ImageMagick. When a PostScript renderer is enabled, a remote attacker can supply a specially crafted Magick Vector Graphics MVG file to inject code into the rendering process. Exploitation of this flaw may lead to arbitrary code execution or a denial of service on the host...

CVE-2026-109262

A flaw was found in ImageMagick. This flaw allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted image file. When the file is processed by the Scalable Vector Graphics SVG encoder, the application fails to properly release allocated memory, leading to excessiv...

CVE-2026-59976 ConvertX: Path Traversal vulnerability leading to Arbitrary File Write

ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convertto parameter to construct an output path. If an authenticated user, or an unauthenticated user when ConvertX is configured to allow unauthenticated access, uploads an...

CVE-2026-59976 ConvertX: Path Traversal vulnerability leading to Arbitrary File Write

ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convertto parameter to construct an output path. If an authenticated user, or an unauthenticated user when ConvertX is configured to allow unauthenticated access, uploads an...

CVE-2026-109274

A flaw was found in ImageMagick. This vulnerability allows information disclosure by enabling a local attacker to bypass path security policies during the execution of a magick script. By exploiting a Time-of-Check to Time-of-Use TOCTOU race condition, an attacker can replace a validated file pat...

CVE-2026-109273

A flaw was found in ImageMagick. An attacker could exploit this vulnerability by providing a specially crafted PostScript file for processing. Because the PostScript decoder allocates more memory than necessary, this issue can result in information disclosure by exposing uninitialized memory...

CVE-2026-109267

A flaw was found in ImageMagick. An attacker could cause a Denial of Service DoS by supplying specially crafted Magick Scripting Language MSL files. An incorrect depth check in the MSL decoder fails to limit recursion during processing, leading to stack exhaustion and causing the application to...

CVE-2026-109271

A flaw was found in ImageMagick. An attacker can exploit this vulnerability by submitting a specially crafted image for processing. If a memory allocation failure occurs within the WBINFO decoder during image decoding, the application improperly accesses previously freed memory. This issue causes...

CVE-2026-109258

A flaw was found in ImageMagick. An invalid memory free vulnerability occurs during the handling of fx operations when initialization of a runtime entry fails. An attacker can exploit this vulnerability by providing input that triggers the initialization failure, leading to memory corruption and ...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion in the MVG decoder due to uncontrolled recursion. An attacker can cause the process to crash by submitting a specially crafted file name that triggers a stack overflow. Remediation A fix was pushed into the master...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime in the WriteSVGImage process. An attacker can exhaust system memory by submitting specially crafted image files for processing. Remediation A fix was pushed into the master branch but n...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the TGA decoder process. An attacker can access sensitive memory contents by submitting a specially crafted TGA image for processing. Remediation A fix was pushed into the master branch but not yet published...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via the MSL decoder due to an incorrect depth check that fails to limit recursion. An attacker can cause the process to crash and exhaust system resources by supplying crafted MSL images that trigger excessive sta...