DeutschShown in its original language — a full translation is planned for a future version.
ImageMagick: Mehrere Schwachstellen
view advisory published 2026-02-23
Ein Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere nicht näher definierte Angriffe durchzuführen.
01
describes (42)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-56373US | medium5.3 | — | ||
ImageMagick before 7.1.2-15 contains a use-after-free vulnerability in the PDB decoder that uses a stale pointer when memory allocation fails. Attackers can trigger this vulnerabil… | ||||
| CVE-2026-56362US | medium4.2 | — | ||
ImageMagick before 7.1.2-15 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCache updating image channel metadata before pixel cache memory a… | ||||
| CVE-2026-53466US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can… | ||||
| CVE-2026-56368US | high7.5 | — | ||
ImageMagick before 7.1.2-15 contains a memory leak vulnerability in multiple coders that write raw pixel data where allocated objects are not properly freed. Attackers can trigger… | ||||
| CVE-2026-56379US | — | — | ||
ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers ca… | ||||
| CVE-2026-56376US | low3.3 | — | ||
ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta coder: when memory allocation fails, a single byte is written to a stale pointer. Remote attack… | ||||
| CVE-2026-56371US | medium5.3 | — | ||
ImageMagick before 7.1.2-15 and 6.9.13-40 contains a memory leak in coders/txt.c when processing TXT files with texture attributes: the texture object allocated via ReadImage is no… | ||||
| CVE-2026-56378US | high8.2 | — | ||
ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can trigger a one-byte heap out-of… | ||||
| CVE-2026-56367US | critical9.1 | — | ||
ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding path (ReadPSDChannelRLE in coders/psd.c) that causes a heap out… | ||||
| CVE-2026-26983US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the MSL interpreter crashes when processing… | ||||
| CVE-2026-26284US | critical9.1 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, ImageMagick lacks proper boundary checking… | ||||
| CVE-2026-26283US | high7.5 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a `continue` statement in the JPEG extent b… | ||||
| CVE-2026-26066US | high7.5 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted profile contain invalid IPTC data… | ||||
| CVE-2026-25989US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file can cause a denial of se… | ||||
| CVE-2026-25988US | high7.5 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, sometimes msl.c fails to update the stack i… | ||||
| CVE-2026-25987US | critical9.1 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exist… | ||||
| CVE-2026-25986US | critical9.8 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer overflow write vulnerability… | ||||
| CVE-2026-25985US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file containing an malicious… | ||||
| CVE-2026-25983US | critical9.8 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted MSL script triggers a heap-use-af… | ||||
| CVE-2026-25982US | medium6.5 | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap out-of-bounds read vulnerability exi… | ||||
showing 20 of 42
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:5573 vom 2026-03-24external
- Amazon Linux Security Advisory ALAS2-2026-3211 vom 2026-04-01external
- Amazon Linux Security Advisory ALAS2-2026-3786 vom 2026-07-08external
- Amazon Linux Security Advisory ALAS2-2026-3939 vom 2026-09-29external
- ImageMagick GitHub vom 2026-02-23external
- ImageMagick GitHub vom 2026-02-23external
- ImageMagick GitHub vom 2026-02-23external
- ImageMagick GitHub vom 2026-02-23external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan