{"id":"CVE-2026-109263","aliases":["CLSA-2026-1791975274","CLSA-2026-1792072825","DEBIAN-CVE-2026-109263","EUVD-2026-97707","GHSA-69jx-j2x2-g5w4","GHSA-fhv3-69qw-xpc9","OESA-2026-4487","OESA-2026-4488","OESA-2026-4489","OESA-2026-4490","SUSE-SU-2026:4753-1","SUSE-SU-2026:4799-1","UBUNTU-CVE-2026-109263","openSUSE-SU-2026:12170-1"],"status":"published","title":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in YUV Encoder","description":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.","severity":{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0042,"percentile":0.3664,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-401"],"published":"2026-10-12T16:04:32Z","modified":"2026-11-05T11:45:36Z","fixes":[{"ecosystem":"Debian:12","package":"imagemagick","fixed_in":["8:6.9.11.60+dfsg-1.6+deb12u15"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"imagemagick","fixed_in":["8:7.1.1.43+dfsg1-1+deb13u14"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"imagemagick","fixed_in":["8:7.1.2.33+dfsg1-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-6-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-6-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-6.q16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-6.q16hdri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"imagemagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libimage-magick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libimage-magick-q16-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libimage-magick-q16hdri-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6.q16-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6.q16hdri-7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-6.q16hdri-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagick++-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6-arch-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16-3-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16hdri-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16hdri-3-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-6.q16hdri-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickcore-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6.q16-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6.q16hdri-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-6.q16hdri-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libmagickwand-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"perlmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.7.4+dfsg-16ubuntu6.15+tuxcare.els53"}]}],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-6.q16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"imagemagick-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libimage-magick-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libimage-magick-q16-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6.q16-5v5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagick++-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6-arch-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-2-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickcore-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6-headers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6.q16-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-6.q16-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libmagickwand-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"perlmagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.8.9.9-7ubuntu5.17+tuxcare.els65"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:6.9.11.60+dfsg-1.6+deb12u15"}]}],"versions":["8:6.9.11.60+dfsg-1.6","8:6.9.11.60+dfsg-1.6+deb12u1","8:6.9.11.60+dfsg-1.6+deb12u10","8:6.9.11.60+dfsg-1.6+deb12u11","8:6.9.11.60+dfsg-1.6+deb12u12","8:6.9.11.60+dfsg-1.6+deb12u13","8:6.9.11.60+dfsg-1.6+deb12u14","8:6.9.11.60+dfsg-1.6+deb12u2","8:6.9.11.60+dfsg-1.6+deb12u3","8:6.9.11.60+dfsg-1.6+deb12u4","8:6.9.11.60+dfsg-1.6+deb12u5","8:6.9.11.60+dfsg-1.6+deb12u6","8:6.9.11.60+dfsg-1.6+deb12u7","8:6.9.11.60+dfsg-1.6+deb12u8","8:6.9.11.60+dfsg-1.6+deb12u9"]},{"source":"osv","ecosystem":"Debian:13","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:7.1.1.43+dfsg1-1+deb13u14"}]}],"versions":["8:7.1.1.43+dfsg1-1","8:7.1.1.43+dfsg1-1+deb13u1","8:7.1.1.43+dfsg1-1+deb13u10","8:7.1.1.43+dfsg1-1+deb13u11","8:7.1.1.43+dfsg1-1+deb13u12","8:7.1.1.43+dfsg1-1+deb13u13","8:7.1.1.43+dfsg1-1+deb13u2","8:7.1.1.43+dfsg1-1+deb13u3","8:7.1.1.43+dfsg1-1+deb13u4","8:7.1.1.43+dfsg1-1+deb13u5","8:7.1.1.43+dfsg1-1+deb13u6","8:7.1.1.43+dfsg1-1+deb13u7","8:7.1.1.43+dfsg1-1+deb13u8","8:7.1.1.43+dfsg1-1+deb13u9"]},{"source":"osv","ecosystem":"Debian:14","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:7.1.2.33+dfsg1-1"}]}],"versions":["8:7.1.1.43+dfsg1-1","8:7.1.1.46+dfsg1-1","8:7.1.1.47+dfsg1-1","8:7.1.1.47+dfsg1-2","8:7.1.2.1+dfsg1-1","8:7.1.2.12+dfsg1-1","8:7.1.2.13+dfsg1-1","8:7.1.2.15+dfsg1-1","8:7.1.2.15+dfsg1-2","8:7.1.2.16+dfsg1-1","8:7.1.2.18+dfsg1-1","8:7.1.2.19+dfsg1-1","8:7.1.2.21+dfsg1-1","8:7.1.2.23+dfsg1-1","8:7.1.2.24+dfsg1-1","8:7.1.2.25+dfsg1-1","8:7.1.2.25+dfsg1-2","8:7.1.2.26+dfsg1-1","8:7.1.2.27+dfsg1-1","8:7.1.2.29+dfsg2-1","8:7.1.2.3+dfsg1-1","8:7.1.2.31+dfsg1-1","8:7.1.2.7+dfsg1-1","8:7.1.2.8+dfsg1-1"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.34-1.oe2203sp4"}]}],"bundled":26},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.34-1.oe2403sp1"}]}],"bundled":26},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.34-1.oe2403sp3"}]}],"bundled":26},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.34-1.oe2403sp4"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.280.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.8.1-71.280.1"}]}],"bundled":24},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP7","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0.9-150400.6.122.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0.9-150400.6.122.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0.9-150400.6.122.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0.9-150400.6.122.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0.9-150400.6.122.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0.9-150400.6.122.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0.9-150400.6.122.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0.9-150400.6.122.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0.9-150400.6.122.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0.9-150400.6.122.1"}]}],"bundled":37},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.0.9-150400.6.122.1"}]}],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:6.7.7.10-5ubuntu3","8:6.7.7.10-5ubuntu4","8:6.7.7.10-6ubuntu1","8:6.7.7.10-6ubuntu2","8:6.7.7.10-6ubuntu3","8:6.7.7.10-6ubuntu3.1","8:6.7.7.10-6ubuntu3.2","8:6.7.7.10-6ubuntu3.3","8:6.7.7.10-6ubuntu3.4","8:6.7.7.10-6ubuntu3.5","8:6.7.7.10-6ubuntu3.6","8:6.7.7.10-6ubuntu3.7","8:6.7.7.10-6ubuntu3.8","8:6.7.7.10-6ubuntu3.9","8:6.7.7.10-6ubuntu3.11","8:6.7.7.10-6ubuntu3.12","8:6.7.7.10-6ubuntu3.13","8:6.7.7.10-6ubuntu3.13+esm1","8:6.7.7.10-6ubuntu3.13+esm2","8:6.7.7.10-6ubuntu3.13+esm3","8:6.7.7.10-6ubuntu3.13+esm4","8:6.7.7.10-6ubuntu3.13+esm5","8:6.7.7.10-6ubuntu3.13+esm6","8:6.7.7.10-6ubuntu3.13+esm7","8:6.7.7.10-6ubuntu3.13+esm8","8:6.7.7.10-6ubuntu3.13+esm9","8:6.7.7.10-6ubuntu3.13+esm10","8:6.7.7.10-6ubuntu3.13+esm11","8:6.7.7.10-6ubuntu3.13+esm12","8:6.7.7.10-6ubuntu3.13+esm13","8:6.7.7.10-6ubuntu3.13+esm14","8:6.7.7.10-6ubuntu3.13+esm15","8:6.7.7.10-6ubuntu3.13+esm16","8:6.7.7.10-6ubuntu3.13+esm17","8:6.7.7.10-6ubuntu3.13+esm18","8:6.7.7.10-6ubuntu3.13+esm19","8:6.7.7.10-6ubuntu3.13+esm20","8:6.7.7.10-6ubuntu3.13+esm21","8:6.7.7.10-6ubuntu3.13+esm22","8:6.7.7.10-6ubuntu3.13+esm23","8:6.7.7.10-6ubuntu3.13+esm24","8:6.7.7.10-6ubuntu3.13+esm25","8:6.7.7.10-6ubuntu3.13+esm26","8:6.7.7.10-6ubuntu3.13+esm27"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:6.8.9.9-5ubuntu2","8:6.8.9.9-6","8:6.8.9.9-6build1","8:6.8.9.9-7","8:6.8.9.9-7ubuntu1","8:6.8.9.9-7ubuntu2","8:6.8.9.9-7ubuntu3","8:6.8.9.9-7ubuntu4","8:6.8.9.9-7ubuntu5","8:6.8.9.9-7ubuntu5.1","8:6.8.9.9-7ubuntu5.2","8:6.8.9.9-7ubuntu5.3","8:6.8.9.9-7ubuntu5.4","8:6.8.9.9-7ubuntu5.5","8:6.8.9.9-7ubuntu5.6","8:6.8.9.9-7ubuntu5.7","8:6.8.9.9-7ubuntu5.8","8:6.8.9.9-7ubuntu5.9","8:6.8.9.9-7ubuntu5.11","8:6.8.9.9-7ubuntu5.12","8:6.8.9.9-7ubuntu5.13","8:6.8.9.9-7ubuntu5.14","8:6.8.9.9-7ubuntu5.15","8:6.8.9.9-7ubuntu5.16","8:6.8.9.9-7ubuntu5.16+esm1","8:6.8.9.9-7ubuntu5.16+esm2","8:6.8.9.9-7ubuntu5.16+esm3","8:6.8.9.9-7ubuntu5.16+esm4","8:6.8.9.9-7ubuntu5.16+esm5","8:6.8.9.9-7ubuntu5.16+esm6","8:6.8.9.9-7ubuntu5.16+esm7","8:6.8.9.9-7ubuntu5.16+esm8","8:6.8.9.9-7ubuntu5.16+esm9","8:6.8.9.9-7ubuntu5.16+esm10","8:6.8.9.9-7ubuntu5.16+esm11","8:6.8.9.9-7ubuntu5.16+esm12","8:6.8.9.9-7ubuntu5.16+esm13","8:6.8.9.9-7ubuntu5.16+esm14","8:6.8.9.9-7ubuntu5.16+esm15","8:6.8.9.9-7ubuntu5.16+esm16","8:6.8.9.9-7ubuntu5.16+esm17","8:6.8.9.9-7ubuntu5.16+esm18","8:6.8.9.9-7ubuntu5.16+esm19","8:6.8.9.9-7ubuntu5.16+esm20","8:6.8.9.9-7ubuntu5.16+esm21","8:6.8.9.9-7ubuntu5.16+esm22","8:6.8.9.9-7ubuntu5.16+esm23","8:6.8.9.9-7ubuntu5.16+esm24","8:6.8.9.9-7ubuntu5.16+esm25","8:6.8.9.9-7ubuntu5.16+esm26"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:6.9.7.4+dfsg-16ubuntu2","8:6.9.7.4+dfsg-16ubuntu3","8:6.9.7.4+dfsg-16ubuntu4","8:6.9.7.4+dfsg-16ubuntu5","8:6.9.7.4+dfsg-16ubuntu6","8:6.9.7.4+dfsg-16ubuntu6.2","8:6.9.7.4+dfsg-16ubuntu6.3","8:6.9.7.4+dfsg-16ubuntu6.4","8:6.9.7.4+dfsg-16ubuntu6.7","8:6.9.7.4+dfsg-16ubuntu6.8","8:6.9.7.4+dfsg-16ubuntu6.9","8:6.9.7.4+dfsg-16ubuntu6.11","8:6.9.7.4+dfsg-16ubuntu6.12","8:6.9.7.4+dfsg-16ubuntu6.13","8:6.9.7.4+dfsg-16ubuntu6.14","8:6.9.7.4+dfsg-16ubuntu6.15","8:6.9.7.4+dfsg-16ubuntu6.15+esm1","8:6.9.7.4+dfsg-16ubuntu6.15+esm2","8:6.9.7.4+dfsg-16ubuntu6.15+esm3","8:6.9.7.4+dfsg-16ubuntu6.15+esm4","8:6.9.7.4+dfsg-16ubuntu6.15+esm5","8:6.9.7.4+dfsg-16ubuntu6.15+esm6","8:6.9.7.4+dfsg-16ubuntu6.15+esm7","8:6.9.7.4+dfsg-16ubuntu6.15+esm8","8:6.9.7.4+dfsg-16ubuntu6.15+esm9","8:6.9.7.4+dfsg-16ubuntu6.15+esm10","8:6.9.7.4+dfsg-16ubuntu6.15+esm11","8:6.9.7.4+dfsg-16ubuntu6.15+esm12","8:6.9.7.4+dfsg-16ubuntu6.15+esm13","8:6.9.7.4+dfsg-16ubuntu6.15+esm14","8:6.9.7.4+dfsg-16ubuntu6.15+esm15","8:6.9.7.4+dfsg-16ubuntu6.15+esm16","8:6.9.7.4+dfsg-16ubuntu6.15+esm17","8:6.9.7.4+dfsg-16ubuntu6.15+esm18"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:6.9.10.23+dfsg-2.1ubuntu3","8:6.9.10.23+dfsg-2.1ubuntu8","8:6.9.10.23+dfsg-2.1ubuntu9","8:6.9.10.23+dfsg-2.1ubuntu10","8:6.9.10.23+dfsg-2.1ubuntu11","8:6.9.10.23+dfsg-2.1ubuntu11.1","8:6.9.10.23+dfsg-2.1ubuntu11.2","8:6.9.10.23+dfsg-2.1ubuntu11.4","8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.5","8:6.9.10.23+dfsg-2.1ubuntu11.6","8:6.9.10.23+dfsg-2.1ubuntu11.6+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.7","8:6.9.10.23+dfsg-2.1ubuntu11.7+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.9","8:6.9.10.23+dfsg-2.1ubuntu11.9+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2","8:6.9.10.23+dfsg-2.1ubuntu11.10","8:6.9.10.23+dfsg-2.1ubuntu11.10+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.11","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm1","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm2","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm3","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm4","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm5","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm6","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm7","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm8","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm14","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm15","8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:6.9.11.60+dfsg-1ubuntu1","8:6.9.11.60+dfsg-1.3","8:6.9.11.60+dfsg-1.3build1","8:6.9.11.60+dfsg-1.3build2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm1","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm2","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm3","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm4","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm6","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm7","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm8","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm15","8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:6.9.11.60+dfsg-1.6ubuntu1","8:6.9.12.98+dfsg1-5","8:6.9.12.98+dfsg1-5.2build1","8:6.9.12.98+dfsg1-5.2build2","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm3","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm5","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm6","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm14","8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:7.1.2.18+dfsg1-1","8:7.1.2.25+dfsg1-2","8:7.1.2.27+dfsg1-1","8:7.1.2.31+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"imagemagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8:7.1.2.3+dfsg1-1","8:7.1.2.8+dfsg1-1","8:7.1.2.12+dfsg1-1","8:7.1.2.13+dfsg1-1","8:7.1.2.15+dfsg1-1","8:7.1.2.16+dfsg1-1","8:7.1.2.18+dfsg1-1","8:7.1.2.18+dfsg1-1ubuntu0.1~esm1","8:7.1.2.18+dfsg1-1ubuntu0.1~esm2","8:7.1.2.18+dfsg1-1ubuntu0.1~esm3","8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ImageMagick","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.34-1.1"}]}],"bundled":21}],"products":[{"vendor":"imagemagick","product":"imagemagick"}],"references":[{"url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4","tags":["vendor-advisory","Vendor Advisory","advisory","report"]},{"url":"https://github.com/ImageMagick/ImageMagick/commit/493fab0b6072787e929184761b6ab6405a9486a2","tags":["patch","Patch","fix","report"]},{"url":"https://github.com/ImageMagick/ImageMagick6/commit/3e2075fe4a148ce33e7d749a99898e55a6cad7b5","tags":["patch","Patch","fix","report"]},{"url":"https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-memory-leak-in-yuv-encoder","tags":["third-party-advisory","Patch","Third Party Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109263","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fhv3-69qw-xpc9"},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1791975274.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106568","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109259","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109275","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109278","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1792072825.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/109xxx/CVE-2026-109263.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-109263","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4487","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105081","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109258","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109260","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109261","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109262","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109264","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109265","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109266","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109267","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109268","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109269","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109270","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109271","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109272","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109273","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109274","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109277","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109279","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109280","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109281","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109282","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4488","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4489","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4490","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264753-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1281912","tags":["report"]},{"url":"https://bugzilla.suse.com/1284662","tags":["report"]},{"url":"https://bugzilla.suse.com/1284664","tags":["report"]},{"url":"https://bugzilla.suse.com/1284665","tags":["report"]},{"url":"https://bugzilla.suse.com/1284668","tags":["report"]},{"url":"https://bugzilla.suse.com/1284669","tags":["report"]},{"url":"https://bugzilla.suse.com/1284675","tags":["report"]},{"url":"https://bugzilla.suse.com/1284678","tags":["report"]},{"url":"https://bugzilla.suse.com/1284680","tags":["report"]},{"url":"https://bugzilla.suse.com/1284681","tags":["report"]},{"url":"https://bugzilla.suse.com/1284682","tags":["report"]},{"url":"https://bugzilla.suse.com/1284683","tags":["report"]},{"url":"https://bugzilla.suse.com/1285071","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-107208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-107209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-107210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109269","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-46521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-61869","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93586","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264799-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1268113","tags":["report"]},{"url":"https://bugzilla.suse.com/1268117","tags":["report"]},{"url":"https://bugzilla.suse.com/1281909","tags":["report"]},{"url":"https://bugzilla.suse.com/1281910","tags":["report"]},{"url":"https://bugzilla.suse.com/1281911","tags":["report"]},{"url":"https://bugzilla.suse.com/1284217","tags":["report"]},{"url":"https://bugzilla.suse.com/1284663","tags":["report"]},{"url":"https://bugzilla.suse.com/1284667","tags":["report"]},{"url":"https://bugzilla.suse.com/1284671","tags":["report"]},{"url":"https://bugzilla.suse.com/1284672","tags":["report"]},{"url":"https://bugzilla.suse.com/1284673","tags":["report"]},{"url":"https://bugzilla.suse.com/1284677","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-105083","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-106578","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-93589","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-109263","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-109263","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-105081","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-109964","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-109263","title":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in YUV Encoder","description":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.","status":"published","published":"2026-10-12T16:04:32.597Z","modified":"2026-10-13T15:32:38.249Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T14:20:11.581788Z"}],"euvd":[{"id":"EUVD-2026-97707","description":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.","status":"published","published":"2026-10-12T16:04:32Z","modified":"2026-10-13T15:32:38Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T17:27:20.397021Z"}],"ghsa":[{"id":"GHSA-fhv3-69qw-xpc9","title":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder,...","description":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.","status":"published","published":"2026-10-12T18:31:40Z","modified":"2026-10-12T18:31:47Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-401"],"updated_at":"2026-11-02T15:13:07.218945Z"}],"nvd":[{"id":"CVE-2026-109263","description":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.","status":"published","published":"2026-10-12T17:17:18.183Z","modified":"2026-11-03T17:29:54.723Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-401"],"updated_at":"2026-11-03T20:18:16.025511Z"}],"osv":[{"id":"CVE-2026-109263","title":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Memory Leak in YUV Encoder","description":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.","status":"published","published":"2026-10-12T16:04:32.597Z","modified":"2026-11-05T08:04:48.925399474Z","cvss":[{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-401"],"updated_at":"2026-11-05T09:08:14.330889Z"},{"id":"DEBIAN-CVE-2026-109263","description":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.","status":"published","published":"2026-10-12T17:17:18.183Z","modified":"2026-11-04T23:01:15.420602521Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-04T23:09:59.08306Z"},{"id":"OESA-2026-4487","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\n\nImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to evade the configured policy.(CVE-2026-105081)\n\nImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application crashes.(CVE-2026-109258)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for processing to disclose contents of uninitialized memory from the ImageMagick process.(CVE-2026-109259)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause a denial of service.(CVE-2026-109260)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. Attackers can supply images whose GIF conversion causes quantization to fail, leaking memory with each attempt and degrading availability.(CVE-2026-109261)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.(CVE-2026-109262)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.(CVE-2026-109263)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust the program stack. An attacker who controls a file name processed by ImageMagick can trigger a stack overflow that crashes the process, causing a denial of service.(CVE-2026-109264)\n\nImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. Attackers can supply a crafted image containing a malformed XMP profile to trigger the over-read and crash the application.(CVE-2026-109265)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection vulnerability in the CIP encoder, which does not properly escape input-derived data when writing Cisco IP Phone XML output. Attackers can supply a crafted file that, when converted to CIP format, injects arbitrary markup into the generated XML.(CVE-2026-109266)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a denial of service.(CVE-2026-109267)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused, potentially crashing the process.(CVE-2026-109268)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the JPEG decoder, which performs a read that exposes uninitialized memory when handling crafted input. Attackers can supply a crafted JPEG file for processing to disclose uninitialized memory contents.(CVE-2026-109269)\n\nImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option that allows attackers to cause unreleased memory allocations by supplying certain arguments. Attackers can repeatedly invoke the -process option with crafted arguments to gradually exhaust memory and degrade service availability.(CVE-2026-109270)\n\nImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers can supply a crafted image that, when decoded under memory allocation failure conditions, causes freed memory to be reused, crashing the application.(CVE-2026-109271)\n\nImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.(CVE-2026-109272)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory contents.(CVE-2026-109273)\n\nImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick script. Attackers can swap a checked path with a symlink during script execution to read files that the security policy is meant to block.(CVE-2026-109274)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path.(CVE-2026-109275)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Attackers can submit crafted JNG files for processing to repeatedly leak temporary files, consuming disk space and degrading availability.(CVE-2026-109276)\n\nImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. Attackers can use the -script operation to close file descriptors not opened by the current operation, circumventing configured security policies.(CVE-2026-109277)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, which fails to release allocated memory when a required resource cannot be acquired. Attackers can repeatedly trigger wavelet-denoise processing under resource-constrained conditions to leak memory and degrade service availability.(CVE-2026-109278)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer over-write. An attacker able to induce concurrent security policy access can crash the application, causing a denial of service.(CVE-2026-109279)\n\nImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who can supply crafted -fx expressions under memory pressure can trigger freed memory access, causing crashes or memory corruption.(CVE-2026-109280)\n\nImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap memory, potentially disclosing limited memory contents.(CVE-2026-109281)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a SIGABRT or SIGSEGV, crashing the process and causing denial of service.(CVE-2026-109282)","status":"published","published":"2026-10-22T14:35:43Z","modified":"2026-10-22T14:45:10.481557698Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4488","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\n\nImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to evade the configured policy.(CVE-2026-105081)\n\nImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application crashes.(CVE-2026-109258)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for processing to disclose contents of uninitialized memory from the ImageMagick process.(CVE-2026-109259)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause a denial of service.(CVE-2026-109260)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. Attackers can supply images whose GIF conversion causes quantization to fail, leaking memory with each attempt and degrading availability.(CVE-2026-109261)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.(CVE-2026-109262)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.(CVE-2026-109263)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust the program stack. An attacker who controls a file name processed by ImageMagick can trigger a stack overflow that crashes the process, causing a denial of service.(CVE-2026-109264)\n\nImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. Attackers can supply a crafted image containing a malformed XMP profile to trigger the over-read and crash the application.(CVE-2026-109265)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection vulnerability in the CIP encoder, which does not properly escape input-derived data when writing Cisco IP Phone XML output. Attackers can supply a crafted file that, when converted to CIP format, injects arbitrary markup into the generated XML.(CVE-2026-109266)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a denial of service.(CVE-2026-109267)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused, potentially crashing the process.(CVE-2026-109268)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the JPEG decoder, which performs a read that exposes uninitialized memory when handling crafted input. Attackers can supply a crafted JPEG file for processing to disclose uninitialized memory contents.(CVE-2026-109269)\n\nImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option that allows attackers to cause unreleased memory allocations by supplying certain arguments. Attackers can repeatedly invoke the -process option with crafted arguments to gradually exhaust memory and degrade service availability.(CVE-2026-109270)\n\nImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers can supply a crafted image that, when decoded under memory allocation failure conditions, causes freed memory to be reused, crashing the application.(CVE-2026-109271)\n\nImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.(CVE-2026-109272)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory contents.(CVE-2026-109273)\n\nImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick script. Attackers can swap a checked path with a symlink during script execution to read files that the security policy is meant to block.(CVE-2026-109274)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path.(CVE-2026-109275)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Attackers can submit crafted JNG files for processing to repeatedly leak temporary files, consuming disk space and degrading availability.(CVE-2026-109276)\n\nImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. Attackers can use the -script operation to close file descriptors not opened by the current operation, circumventing configured security policies.(CVE-2026-109277)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, which fails to release allocated memory when a required resource cannot be acquired. Attackers can repeatedly trigger wavelet-denoise processing under resource-constrained conditions to leak memory and degrade service availability.(CVE-2026-109278)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer over-write. An attacker able to induce concurrent security policy access can crash the application, causing a denial of service.(CVE-2026-109279)\n\nImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who can supply crafted -fx expressions under memory pressure can trigger freed memory access, causing crashes or memory corruption.(CVE-2026-109280)\n\nImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap memory, potentially disclosing limited memory contents.(CVE-2026-109281)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a SIGABRT or SIGSEGV, crashing the process and causing denial of service.(CVE-2026-109282)","status":"published","published":"2026-10-22T14:35:44Z","modified":"2026-10-22T14:45:11.084283765Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4489","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\n\nImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to evade the configured policy.(CVE-2026-105081)\n\nImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application crashes.(CVE-2026-109258)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for processing to disclose contents of uninitialized memory from the ImageMagick process.(CVE-2026-109259)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause a denial of service.(CVE-2026-109260)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. Attackers can supply images whose GIF conversion causes quantization to fail, leaking memory with each attempt and degrading availability.(CVE-2026-109261)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.(CVE-2026-109262)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.(CVE-2026-109263)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust the program stack. An attacker who controls a file name processed by ImageMagick can trigger a stack overflow that crashes the process, causing a denial of service.(CVE-2026-109264)\n\nImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. Attackers can supply a crafted image containing a malformed XMP profile to trigger the over-read and crash the application.(CVE-2026-109265)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection vulnerability in the CIP encoder, which does not properly escape input-derived data when writing Cisco IP Phone XML output. Attackers can supply a crafted file that, when converted to CIP format, injects arbitrary markup into the generated XML.(CVE-2026-109266)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a denial of service.(CVE-2026-109267)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused, potentially crashing the process.(CVE-2026-109268)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the JPEG decoder, which performs a read that exposes uninitialized memory when handling crafted input. Attackers can supply a crafted JPEG file for processing to disclose uninitialized memory contents.(CVE-2026-109269)\n\nImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option that allows attackers to cause unreleased memory allocations by supplying certain arguments. Attackers can repeatedly invoke the -process option with crafted arguments to gradually exhaust memory and degrade service availability.(CVE-2026-109270)\n\nImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers can supply a crafted image that, when decoded under memory allocation failure conditions, causes freed memory to be reused, crashing the application.(CVE-2026-109271)\n\nImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.(CVE-2026-109272)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory contents.(CVE-2026-109273)\n\nImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick script. Attackers can swap a checked path with a symlink during script execution to read files that the security policy is meant to block.(CVE-2026-109274)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path.(CVE-2026-109275)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Attackers can submit crafted JNG files for processing to repeatedly leak temporary files, consuming disk space and degrading availability.(CVE-2026-109276)\n\nImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. Attackers can use the -script operation to close file descriptors not opened by the current operation, circumventing configured security policies.(CVE-2026-109277)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, which fails to release allocated memory when a required resource cannot be acquired. Attackers can repeatedly trigger wavelet-denoise processing under resource-constrained conditions to leak memory and degrade service availability.(CVE-2026-109278)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer over-write. An attacker able to induce concurrent security policy access can crash the application, causing a denial of service.(CVE-2026-109279)\n\nImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who can supply crafted -fx expressions under memory pressure can trigger freed memory access, causing crashes or memory corruption.(CVE-2026-109280)\n\nImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap memory, potentially disclosing limited memory contents.(CVE-2026-109281)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a SIGABRT or SIGSEGV, crashing the process and causing denial of service.(CVE-2026-109282)","status":"published","published":"2026-10-22T14:35:45Z","modified":"2026-10-22T14:45:11.088107501Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4490","title":"ImageMagick security update","description":"Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves.\r\n\r\nSecurity Fix(es):\n\nImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to evade the configured policy.(CVE-2026-105081)\n\nImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can trigger the failed FX runtime initialization to cause an invalid free, resulting in memory corruption and application crashes.(CVE-2026-109258)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for processing to disclose contents of uninitialized memory from the ImageMagick process.(CVE-2026-109259)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers who can repeatedly trigger PNG encoding operations in which libpng initialization fails can exhaust memory and cause a denial of service.(CVE-2026-109260)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encoding. Attackers can supply images whose GIF conversion causes quantization to fail, leaking memory with each attempt and degrading availability.(CVE-2026-109261)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. Attackers can supply crafted image files that are processed by the SVG encoder to leak memory and cause a denial of service through resource consumption.(CVE-2026-109262)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.(CVE-2026-109263)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust the program stack. An attacker who controls a file name processed by ImageMagick can trigger a stack overflow that crashes the process, causing a denial of service.(CVE-2026-109264)\n\nImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP profiles. Attackers can supply a crafted image containing a malformed XMP profile to trigger the over-read and crash the application.(CVE-2026-109265)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection vulnerability in the CIP encoder, which does not properly escape input-derived data when writing Cisco IP Phone XML output. Attackers can supply a crafted file that, when converted to CIP format, injects arbitrary markup into the generated XML.(CVE-2026-109266)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can supply a set of crafted MSL images that exhaust the stack when one of them is read, crashing the process and causing a denial of service.(CVE-2026-109267)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can supply a crafted CMYK image that, when written to PDF with JPEG2000 compression, causes freed memory to be reused, potentially crashing the process.(CVE-2026-109268)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the JPEG decoder, which performs a read that exposes uninitialized memory when handling crafted input. Attackers can supply a crafted JPEG file for processing to disclose uninitialized memory contents.(CVE-2026-109269)\n\nImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option that allows attackers to cause unreleased memory allocations by supplying certain arguments. Attackers can repeatedly invoke the -process option with crafted arguments to gradually exhaust memory and degrade service availability.(CVE-2026-109270)\n\nImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers can supply a crafted image that, when decoded under memory allocation failure conditions, causes freed memory to be reused, crashing the application.(CVE-2026-109271)\n\nImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service.(CVE-2026-109272)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory contents.(CVE-2026-109273)\n\nImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick script. Attackers can swap a checked path with a symlink during script execution to read files that the security policy is meant to block.(CVE-2026-109274)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted MVG file that, when decoded, injects code into the PostScript rendering path.(CVE-2026-109275)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Attackers can submit crafted JNG files for processing to repeatedly leak temporary files, consuming disk space and degrading availability.(CVE-2026-109276)\n\nImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. Attackers can use the -script operation to close file descriptors not opened by the current operation, circumventing configured security policies.(CVE-2026-109277)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, which fails to release allocated memory when a required resource cannot be acquired. Attackers can repeatedly trigger wavelet-denoise processing under resource-constrained conditions to leak memory and degrade service availability.(CVE-2026-109278)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple threads trigger a race condition that causes a heap buffer over-write. An attacker able to induce concurrent security policy access can crash the application, causing a denial of service.(CVE-2026-109279)\n\nImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who can supply crafted -fx expressions under memory pressure can trigger freed memory access, causing crashes or memory corruption.(CVE-2026-109280)\n\nImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap buffer in specific situations. Attackers who can get a crafted -fx expression processed can read out-of-bounds heap memory, potentially disclosing limited memory contents.(CVE-2026-109281)\n\nImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpected type when writing an image in a compressed format. An attacker who can cause such an image write can trigger a SIGABRT or SIGSEGV, crashing the process and causing denial of service.(CVE-2026-109282)","status":"published","published":"2026-10-22T14:35:45Z","modified":"2026-10-22T14:45:11.084325239Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"UBUNTU-CVE-2026-109263","description":"ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers can supply crafted input that triggers the failing encoder operation, leaking memory and potentially exhausting resources to cause a denial of service.","status":"published","published":"2026-10-12T17:17:00Z","modified":"2026-11-05T11:45:36.318889967Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"4.0","score":6.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-05T13:30:49.23793Z"},{"id":"CLSA-2026-1791975274","title":"Fix of 5 CVEs","description":"   * SECURITY UPDATE: infinite loop in the XML parser via parameter entities\n     - debian/patches/CVE-2026-106568.patch: also check parameter entity\n       ('%') references for circular declarations in ValidateEntities() and\n       ParseInternalDoctype() in magick/xml-tree.c\n     - CVE-2026-106568\n   * SECURITY UPDATE: uninitialized memory read in the TGA decoder\n     - debian/patches/CVE-2026-109259.patch: zero-initialize the TGA header\n       in ReadTGAImage() in coders/tga.c\n     - CVE-2026-109259\n   * SECURITY UPDATE: memory leak in the YUV encoder\n     - debian/patches/CVE-2026-109263.patch: release the resized image when\n       the chroma resize fails, and the chroma image when the scene loop\n       exits early, in WriteYUVImage() in coders/yuv.c\n     - CVE-2026-109263\n   * SECURITY UPDATE: PostScript code injection through font names\n     - debian/patches/CVE-2026-109275.patch: only pass font names made of\n       alphanumerics, '-', '_' and '.' to the PostScript renderer, otherwise\n       fall back to Times-Roman, in RenderPostscript() in magick/annotate.c\n     - CVE-2026-109275\n   * SECURITY UPDATE: memory leak in wavelet denoise\n     - debian/patches/CVE-2026-109278.patch: release the output image on the\n       resource and memory allocation failure paths in WaveletDenoiseImage()\n       in magick/fx.c\n     - CVE-2026-109278","status":"published","published":"2026-10-14T10:54:47Z","modified":"2026-10-26T09:32:04.826904823Z","updated_at":"2026-11-02T15:43:50.599064Z"},{"id":"CLSA-2026-1792072825","title":"Fix CVE(s): CVE-2026-106568, CVE-2026-109263, CVE-2026-109275","description":"   * SECURITY UPDATE: infinite loop on circular parameter entities\n     - debian/patches/CVE-2026-106568.patch: check entity values for both\n       '%' and '\u0026' references in ValidateEntities() so circular parameter\n       entity declarations are rejected in ParseInternalDoctype() in\n       magick/xml-tree.c\n     - CVE-2026-106568\n   * SECURITY UPDATE: memory leak in the YUV encoder\n     - debian/patches/CVE-2026-109263.patch: destroy the luma image when the\n       chroma ResizeImage() fails and destroy the chroma image after the\n       encoding loop in WriteYUVImage() in coders/yuv.c\n     - CVE-2026-109263\n   * SECURITY UPDATE: PostScript code injection through the font name\n     - debian/patches/CVE-2026-109275.patch: only pass font names made of\n       alphanumerics, '-', '_' and '.' to the PostScript renderer in\n       RenderPostscript() in magick/annotate.c\n     - CVE-2026-109275","status":"published","published":"2026-10-15T14:00:37Z","modified":"2026-10-26T09:32:02.917907183Z","updated_at":"2026-11-02T15:43:50.949147Z"},{"id":"openSUSE-SU-2026:12170-1","title":"ImageMagick-7.1.2.34-1.1 on GA media","description":"These are all security issues fixed in the ImageMagick-7.1.2.34-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-18T00:00:00Z","modified":"2026-10-19T09:30:05.151226303Z","updated_at":"2026-11-02T16:58:40.245664Z"},{"id":"SUSE-SU-2026:4753-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912).\n- CVE-2026-106565: a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop\n  (bsc#1284662).\n- CVE-2026-106567: a crafted PSD file can trigger an integer-conversion error in the PSD decoder, causing an infinite\n  loop and DoS (bsc#1284664).\n- CVE-2026-106568: a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop\n  (bsc#1284665).\n- CVE-2026-106571: a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write\n  beyond a heap buffer, crashing the server process (bsc#1284668).\n- CVE-2026-106572: a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call\n  stack and terminate the process (bsc#1284669).\n- CVE-2026-106577: unescaped or untrimmed values can inject code into output generated by PostScript coders\n  (bsc#1284675).\n- CVE-2026-106579: a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially\n  allowing data prohibited by the policy to be read (bsc#1284678).\n- CVE-2026-106580: a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read\n  data that policy should deny and can also cause a crash (bsc#1284680).\n- CVE-2026-107208: a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an\n  ordinary exception, terminating the image-processing process (bsc#1284681).\n- CVE-2026-107209: when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit\n  can cause a crash (bsc#1284682).\n- CVE-2026-107210: a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the\n  configured security-policy limit (bsc#1284683).\n- CVE-2026-109259: Information disclosure via crafted TGA image (bsc#1285071).\n- CVE-2026-109260: Denial of Service via memory leak in PNG encoder (bsc#1285071).\n- CVE-2026-109261: Denial of Service via memory leak in GIF encoder (bsc#1285071).\n- CVE-2026-109262: Denial of Service via memory leak in SVG encoder (bsc#1285071).\n- CVE-2026-109263: Denial of Service via memory leak in YUV encoder (bsc#1285071).\n- CVE-2026-109266: XML injection vulnerability in the CIP encoder (bsc#1285071).\n- CVE-2026-109269: Information disclosure via crafted JPEG file (bsc#1285071).\n- CVE-2026-109273: Information disclosure via crafted PostScript file (bsc#1285071).\n- CVE-2026-109275: Code injection via crafted MVG file (bsc#1285071).\n- CVE-2026-109276: Denial of Service via temporary file leak in JNG decoder (bsc#1285071).\n","status":"published","published":"2026-10-20T10:49:41Z","modified":"2026-10-21T13:00:04.207745637Z","updated_at":"2026-11-02T15:54:05.838224Z"},{"id":"SUSE-SU-2026:4799-1","title":"Security update for ImageMagick","description":"This update for ImageMagick fixes the following issues:\n\n- CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912).\n- CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of\n  service (bsc#1281909).\n- CVE-2026-93588: NULL pointer dereference in the PNM coder can lead to a denial of service (bsc#1281910).\n- CVE-2026-93589: division-by-zero flaw in the FLIF encoder can lead to a denial of service (bsc#1281911).\n- CVE-2026-105083: security policy not applied when a user changes the DOCTYPE in the `policy.xml` file to something\n  else that is valid xml (bsc#1284217).\n- CVE-2026-106565: a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop\n  (bsc#1284662).\n- CVE-2026-106566: delegate symlink cleanup does not check the MAGICK_SHRED_PASSES environment variable, allowing a\n  local privileged workflow to overwrite a file with random data (bsc#1284663).\n- CVE-2026-106567: a crafted PSD file can trigger an integer-conversion error in the PSD decoder, causing an infinite\n  loop and DoS (bsc#1284664).\n- CVE-2026-106568: a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop\n  (bsc#1284665).\n- CVE-2026-106570: an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache\n  server and exhaust its available connections, causing a DoS (bsc#1284667).\n- CVE-2026-106571: a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write\n  beyond a heap buffer, crashing the server process (bsc#1284668).\n- CVE-2026-106572: a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call\n  stack and terminate the process (bsc#1284669).\n- CVE-2026-106573: a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long-\n  running operation (bsc#1284671).\n- CVE-2026-106574: a client connected to the distributed pixel cache server can send crafted pixel data that triggers a\n  heap buffer overwrite and crash the server (bsc#1284672).\n- CVE-2026-106575: a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated\n  processing to exhaust available file descriptors (bsc#1284673).\n- CVE-2026-106577: unescaped or untrimmed values can inject code into output generated by PostScript coders\n  (bsc#1284675).\n- CVE-2026-106578: a crafted image can cause an invalid memory free in the MVG decoder and crash the process\n  (bsc#1284677).\n- CVE-2026-106579: a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially\n  allowing data prohibited by the policy to be read (bsc#1284678).\n- CVE-2026-106580: a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read\n  data that policy should deny and can also cause a crash (bsc#1284680).\n- CVE-2026-107208: a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an\n  ordinary exception, terminating the image-processing process (bsc#1284681).\n- CVE-2026-107209: when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit\n  can cause a crash (bsc#1284682).\n- CVE-2026-107210: a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the\n  configured security-policy limit (bsc#1284683).\n- CVE-2026-109259: Information disclosure via crafted TGA image (bsc#1285071).\n- CVE-2026-109260: Denial of Service via memory leak in PNG encoder (bsc#1285071).\n- CVE-2026-109261: Denial of Service via memory leak in GIF encoder (bsc#1285071).\n- CVE-2026-109262: Denial of Service via memory leak in SVG encoder (bsc#1285071).\n- CVE-2026-109263: Denial of Service via memory leak in YUV encoder (bsc#1285071).\n- CVE-2026-109266: XML injection vulnerability in the CIP encoder (bsc#1285071).\n- CVE-2026-109268: Denial of Service via use-after-free in PDF writer (bsc#1285071).\n- CVE-2026-109269: Information disclosure via crafted JPEG file (bsc#1285071).\n- CVE-2026-109270: Denial of Service via memory leak in the -process option (bsc#1285071).\n- CVE-2026-109273: Information disclosure via crafted PostScript file (bsc#1285071).\n- CVE-2026-109275: Code injection via crafted MVG file (bsc#1285071).\n- CVE-2026-109276: Denial of Service via temporary file leak in JNG decoder (bsc#1285071).\n- CVE-2026-109277: Security policy bypass via -script operation (bsc#1285071).\n- CVE-2026-109278: Denial of Service via memory leak in wavelet-denoise operation (bsc#1285071).\n","status":"published","published":"2026-10-21T07:57:03Z","modified":"2026-10-21T20:02:15.439302894Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}