WID-SEC-W-2026-3486

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

ImageMagick: Mehrere Schwachstellen

view advisory published 2026-09-21

Ein Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.

01

describes (26)

Related CVEs.

IDseverity exploitable
CVE-2026-105827USmedium5.3—
Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105826USmedium5.3—
Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105825USmedium5.3—
Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105824USmedium5.9—
Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105823USmedium4.0—
Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105405USmedium5.9—
Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105404USmedium5.3—
Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105403USmedium6.2—
Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105402USmedium5.3—
Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105401USmedium5.3—
Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105400USmedium5.3—
Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105399USmedium5.3—
Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-105398USmedium5.1—
Rejected reason: This CVE ID has been rejected as a duplicate.
CVE-2026-107210US——
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted highly compressed MAT image can make the M…
CVE-2026-107209UShigh7.5—
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, when ImageMagick is built without Cairo support, a c…
CVE-2026-107208US——
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted XMP profile can reach a recursion limit th…
CVE-2026-106580UShigh8.2—
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder a…
CVE-2026-106579UShigh7.5OT elevated—
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can bypass an ImageMagick security p…
CVE-2026-106578UShigh7.5—
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in…
CVE-2026-106577USmedium6.5—
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, unescaped or untrimmed values can inject code into o…
showing 20 of 26
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan