UBUNTU-CVE-2026-109275

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path...

CVE-2026-109272

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service...

CVE-2026-109273

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory conten...

CVE-2026-109275 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path...

EUVD-2026-97719

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path...

CVE-2026-109275 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path...

CVE-2026-109275

The ImageMagick software is vulnerable to a code injection vulnerability in the MVG decoder when utilizing a PostScript renderer . Affected versions include those before 6.9.13-57 and 7.x before 7.1.2-32 . An attacker can provide a maliciously crafted MVG file that, upon decoding, injects code in...

CVE-2026-109275 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Code Injection via MVG Decoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path...

CVE-2026-109273 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in PostScript Decoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory conten...

EUVD-2026-97717

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory conten...

CVE-2026-109273

ImageMagick versions prior to 6.9.13-57 and 7.x before 7.1.2-32 are vulnerable to an information disclosure vulnerability within the PostScript decoder . The root cause is a buffer allocation error where the decoder allocates a buffer one byte longer than the decoded data, allowing an attacker to...

CVE-2026-109273 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in PostScript Decoder

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory conten...

EUVD-2026-97716

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service...

CVE-2026-109272 ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service...

CVE-2026-109272

ImageMagick versions 7.1.1-31 before 7.1.2-32 are vulnerable to a NULL pointer dereference within the PostScript decoder . This vulnerability is triggered when a specific policy limit is reached during the processing of a crafted PostScript file. An attacker can leverage this flaw to crash the ap...

CVE-2026-109272 ImageMagick 7.1.1-31 before 7.1.2-32 Null Pointer Dereference in PostScript Decoder

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service...

PT-2026-110690

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-57 ImageMagick versions prior to 7.1.2-32 Description An information disclosure issue exists in the PostScript decoder. The decoder allocates a buffer that is one byte longer than the decoded data, allowing...

CVE-2026-109273: Use of Uninitialized Resource

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory conten...

PT-2026-110689

Name of the Vulnerable Software and Affected Versions ImageMagick versions 7.1.1-31 through 7.1.2-31 Description A NULL pointer dereference occurs in the PostScript decoder when a policy limit is reached. A remote attacker can cause a denial of service by providing a specially crafted PostScript...

CVE-2026-109272: NULL Pointer Dereference

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service...