Most recent entries from all

bdu:2026-02558

EUVD-2026-271318

fkie_cve-2026-27798

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability occurs when processing an image with small dimension using the `-wavelet-denoise` operator. Versions 7.1.2-15 and 6.9.13-40 contain a patch.

GHSA-qpgx-jfcq-r59f — ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images

Affected: NuGet: Magick.NET-Q16-AnyCPU, NuGet: Magick.NET-Q16-HDRI-AnyCPU, NuGet: Magick.NET-Q16-HDRI-OpenMP-arm64, NuGet: Magick.NET-Q16-HDRI-OpenMP-x64, NuGet: Magick.NET-Q16-HDRI-arm64, NuGet: Magick.NET-Q16-HDRI-x64, NuGet: Magick.NET-Q16-HDRI-x86, NuGet: Magick.NET-Q16-OpenMP-arm64, NuGet: Magick.NET-Q16-OpenMP-x64, NuGet: Magick.NET-Q16-OpenMP-x86 and 9 more

A heap buffer over-read vulnerability occurs when processing an image with small dimension using the `-wavelet-denoise` operator.

``` ==3693336==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x511000001280 at pc 0x5602c8b0cc75 bp 0x7ffcb105d510 sp 0x7ffcb105d500 READ of size 4 at 0x511000001280 thread T0 ```

OESA-2026-1502 — ImageMagick security update

Affected: openEuler:22.03-LTS-SP4: ImageMagick, openEuler:24.03-LTS: ImageMagick, openEuler:24.03-LTS-SP1: ImageMagick, openEuler:24.03-LTS-SP2: ImageMagick, openEuler:24.03-LTS-SP3: ImageMagick, openEuler:20.03-LTS-SP4: ImageMagick

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves. Security Fix(es):

ImageMagick is an open-source software suite for image processing. A heap buffer over-read vulnerability exists in its WaveletDenoise module when processing certain small-sized images. An attacker could exploit this vulnerability by crafting a malicious image file, potentially causing the application to crash (denial of service) or, under specific conditions, leaking sensitive information from the process memory.(CVE-2026-27798)

ImageMagick is a widely used open-source software suite for image processing. A vulnerability exists in its DjVu decoder where an out-of-bounds read can occur when processing a specially crafted DjVu image file. An attacker could exploit this by tricking a user into processing a malicious DjVu file, potentially leading to information disclosure, application crash, or denial of service. This vulnerability has been disclosed in a GitHub Security Advisory.(CVE-2026-27799)

openSUSE-SU-2026:10278-1 — ImageMagick-7.1.2.15-2.1 on GA media

ImageMagick-7.1.2.15-2.1 on GA media

SUSE-SU-2026:0852-1 — Security update for ImageMagick

Security update for ImageMagick

UBUNTU-CVE-2026-27798

Affected: Ubuntu:Pro:18.04:LTS: imagemagick, Ubuntu:Pro:20.04:LTS: imagemagick, Ubuntu:Pro:22.04:LTS: imagemagick, Ubuntu:Pro:24.04:LTS: imagemagick, Ubuntu:25.10: imagemagick

VDE-2026-021 — WAGO: Multiple Vulnerabilities in WAGO VC Hub

The VC Hub incorporates the Magick.NET‑Q16‑AnyCPU component, derived from ImageMagick, to process user‑uploaded images and generate thumbnails within the projects image library. Only authenticated users with the Design Project Permission can upload images.

WID-SEC-W-2026-0499 — ImageMagick: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um Informationen offenzulegen und einen Heap-Pufferüberlauf auszulösen, wodurch die Integrität oder Verfügbarkeit des Systems beeinträchtigt werden kann.