4 matches found
ImageMagick: Policy Bypass possible with matrix-backed operations
Matrix bases operations like -canny are missing a check for allowed memory allocation that could result allocating more memory than allowed...
GHSA-RVHP-75F6-9JQH ImageMagick: Policy Bypass possible with matrix-backed operations
Matrix bases operations like -canny are missing a check for allowed memory allocation that could result allocating more memory than allowed...
SUSE-SU-2026:22829-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues - CVE-2026-55628: Policy Bypass in concatenate operation due to missing checks bsc1270081. - CVE-2026-56362: Heap-buffer-overflow read in GetPixelIndex due to metadata-cache desynchronization in OpenPixelCache bsc1271100. - CVE-2026-56366: ME...
CVE-2026-61465: Allocation of Resources Without Limits or Throttling
ImageMagick before 7.1.2-26 and 6.9.13-51 is missing a check for the allowed memory allocation limit in matrix-backed operations such as -canny. An attacker can supply a crafted image that causes ImageMagick to allocate more memory than permitted by the configured policy, resulting in a denial of...