DeutschShown in its original language — a full translation is planned for a future version.
ImageMagick: Mehrere Schwachstellen
view advisory published 2026-04-13
Ein Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen oder andere, nicht näher spezifizierte Auswirkungen zu erreichen.
01
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-40312US | medium5.5 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, an off by one error in the MSL decoder could result in a… | ||||
| CVE-2026-40311US | medium5.5 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below 7.1.2-19 and 6.9.13-44 contain a heap use-after-free vulnerability tha… | ||||
| CVE-2026-40310US | medium5.5 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Versions below both 7.1.2-19 and 6.9.13-44, contain a heap out-of-bounds write in the… | ||||
| CVE-2026-40183US | medium5.5 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, the JXL encoder has an heap write overflow when a user sp… | ||||
| CVE-2026-40169US | medium5.5 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, a crafted image could result in an out of bounds heap wri… | ||||
| CVE-2026-34238US | medium5.5 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, an integer overflow in the despeckle o… | ||||
| CVE-2026-33908US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, Magick frees the memory of the XML tre… | ||||
| CVE-2026-33905US | high7.1 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the -sample operation has an out of bo… | ||||
| CVE-2026-33902US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a stack overflow vulnerability in Imag… | ||||
| CVE-2026-33901US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, a heap buffer overflow occurs in the M… | ||||
| CVE-2026-33900US | high7.5 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 and 6.9.13-44, the viff encoder contains an integer t… | ||||
| CVE-2026-33899US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-189 and 6.9.13-44, when `Magick` parses an XML file it is pos… | ||||
02
references
External citations — patches, advisories, analysis.
- Amazon Linux Security Advisory ALAS2-2026-3278 vom 2026-04-30external
- Fedora Security Advisory FEDORA-EPEL-2026-2D971FC3B0 vom 2026-06-09external
- Fedora Security Advisory FEDORA-EPEL-2026-49C3A0FFA2 vom 2026-06-12external
- Fedora Security Advisory FEDORA-EPEL-2026-BC7538A3D7 vom 2026-06-12external
- Fedora Security Advisory FEDORA-EPEL-2026-FB9A9AB1E9 vom 2026-06-09external
- GitHub Security Advisory GHSA-26qp-ffjh-2x4v vom 2026-04-13external
- GitHub Security Advisory GHSA-5592-p365-24xh vom 2026-04-13external
- GitHub Security Advisory GHSA-5xg3-585r-9jh5 vom 2026-04-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan