DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
ImageMagick: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-05-17
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.
01
beschreibt (15)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-53466US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, an integer overflow in the XCF decoder can… | ||||
| CVE-2026-56369US | —OT erhöht | — | ||
ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the PasskeyEncipherImage method due to AES-CTR nonce reuse. Attackers can exploit nonce reuse in the… | ||||
| CVE-2026-56363US | — | — | ||
ImageMagick before 7.1.2-22 contains a division by zero vulnerability in binomial kernel processing that allows attackers to cause denial of service. An attacker can supply a large… | ||||
| CVE-2026-46559US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, an incorrect check in the JP2 will result i… | ||||
| CVE-2026-46557US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-23, due to a missing depth check a stack overflow can occur in… | ||||
| CVE-2026-46521US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when using LZMA compression in the MIFF enc… | ||||
| CVE-2026-46523US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, a crafted MSL image can trigger a heap-use-… | ||||
| CVE-2026-46522US | — | Exploit | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, due to a missing check in the MIFF decoder,… | ||||
| CVE-2026-46520US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading multiple images with different… | ||||
| CVE-2026-45664US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, because of a missing check in the MNG coder… | ||||
| CVE-2026-45624US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when performing a polynomial distortion an… | ||||
| CVE-2026-45359US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-22, an invalid connected-components:keep-top va… | ||||
| CVE-2026-45358US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, an off by one in the meta encoder could res… | ||||
| CVE-2026-45031US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, due to a missing check in the PSD decoder i… | ||||
| CVE-2026-42326US | — | — | ||
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a maliciou… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Amazon Linux Security Advisory ALAS2-2026-3346 vom 2026-06-09external
- Amazon Linux Security Advisory ALAS2-2026-3939 vom 2026-09-29external
- GitHub Security Advisory GHSA-36wm-hprc-mcf5 vom 2026-05-17external
- GitHub Security Advisory GHSA-533m-3wf6-c33v vom 2026-05-17external
- GitHub Security Advisory GHSA-5r4x-w6p5-222q vom 2026-05-17external
- GitHub Security Advisory GHSA-7gg8-qqx7-92g5 vom 2026-05-17external
- GitHub Security Advisory GHSA-7wff-wpr6-vmhm vom 2026-05-17external
- GitHub Security Advisory GHSA-cr6r-hmj8-pr7r vom 2026-05-17external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan