Search
Find a vulnerability
Search criteria
Related vulnerabilities
FKIE_CVE-2026-105081
Vulnerability from fkie_nvd - Published: 2026-10-12 13:17 - Updated: 2026-10-15 15:55
Severity
Summary
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to evade the configured policy.
References
Impacted products
| Vendor | Product | Version |
|---|
{
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"product": "ImageMagick",
"vendor": "ImageMagick",
"versions": [
{
"lessThan": "7.1.2-33",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "7.1.2-33",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ImageMagick",
"vendor": "ImageMagick",
"versions": [
{
"lessThan": "6.9.13-58",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.9.13-58",
"versionType": "semver"
}
]
}
],
"source": "disclosure@vulncheck.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to evade the configured policy."
}
],
"id": "CVE-2026-105081",
"lastModified": "2026-10-15T15:55:45.630",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 3.6,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"exploitabilityScore": 1.0,
"impactScore": 2.5,
"source": "disclosure@vulncheck.com",
"type": "Secondary"
}
],
"cvssMetricV40": [
{
"cvssData": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"attackVector": "LOCAL",
"availabilityRequirement": "NOT_DEFINED",
"baseScore": 2.0,
"baseSeverity": "LOW",
"confidentialityRequirement": "NOT_DEFINED",
"exploitMaturity": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"source": "disclosure@vulncheck.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-105081",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-13T18:35:34.310390Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-10-12T13:17:25.590",
"references": [
{
"source": "disclosure@vulncheck.com",
"url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-79p5-w6jv-r997"
},
{
"source": "disclosure@vulncheck.com",
"url": "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-33-policy-bypass-via-symlink-in-isrightsauthorizedbyname"
}
],
"sourceIdentifier": "disclosure@vulncheck.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-59"
}
],
"source": "disclosure@vulncheck.com",
"type": "Secondary"
}
]
}
UBUNTU-CVE-2026-105081 (CVE-2026-105081)
Vulnerability from osv_ubuntu – Published: 2026-10-12 13:17 – Updated: 2026-10-12 13:17 – Source website
VLAI
Details
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to evade the configured policy.
Severity
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "imagemagick",
"binary_version": "8:6.7.7.10-6ubuntu3.13+esm27"
},
{
"binary_name": "imagemagick-common",
"binary_version": "8:6.7.7.10-6ubuntu3.13+esm27"
},
{
"binary_name": "libmagick++5",
"binary_version": "8:6.7.7.10-6ubuntu3.13+esm27"
},
{
"binary_name": "libmagickcore5",
"binary_version": "8:6.7.7.10-6ubuntu3.13+esm27"
},
{
"binary_name": "libmagickcore5-extra",
"binary_version": "8:6.7.7.10-6ubuntu3.13+esm27"
},
{
"binary_name": "libmagickwand5",
"binary_version": "8:6.7.7.10-6ubuntu3.13+esm27"
},
{
"binary_name": "perlmagick",
"binary_version": "8:6.7.7.10-6ubuntu3.13+esm27"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "imagemagick",
"purl": "pkg:deb/ubuntu/imagemagick@8:6.7.7.10-6ubuntu3.13+esm27?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8:6.7.7.10-5ubuntu3",
"8:6.7.7.10-5ubuntu4",
"8:6.7.7.10-6ubuntu1",
"8:6.7.7.10-6ubuntu2",
"8:6.7.7.10-6ubuntu3",
"8:6.7.7.10-6ubuntu3.1",
"8:6.7.7.10-6ubuntu3.2",
"8:6.7.7.10-6ubuntu3.3",
"8:6.7.7.10-6ubuntu3.4",
"8:6.7.7.10-6ubuntu3.5",
"8:6.7.7.10-6ubuntu3.6",
"8:6.7.7.10-6ubuntu3.7",
"8:6.7.7.10-6ubuntu3.8",
"8:6.7.7.10-6ubuntu3.9",
"8:6.7.7.10-6ubuntu3.11",
"8:6.7.7.10-6ubuntu3.12",
"8:6.7.7.10-6ubuntu3.13",
"8:6.7.7.10-6ubuntu3.13+esm1",
"8:6.7.7.10-6ubuntu3.13+esm2",
"8:6.7.7.10-6ubuntu3.13+esm3",
"8:6.7.7.10-6ubuntu3.13+esm4",
"8:6.7.7.10-6ubuntu3.13+esm5",
"8:6.7.7.10-6ubuntu3.13+esm6",
"8:6.7.7.10-6ubuntu3.13+esm7",
"8:6.7.7.10-6ubuntu3.13+esm8",
"8:6.7.7.10-6ubuntu3.13+esm9",
"8:6.7.7.10-6ubuntu3.13+esm10",
"8:6.7.7.10-6ubuntu3.13+esm11",
"8:6.7.7.10-6ubuntu3.13+esm12",
"8:6.7.7.10-6ubuntu3.13+esm13",
"8:6.7.7.10-6ubuntu3.13+esm14",
"8:6.7.7.10-6ubuntu3.13+esm15",
"8:6.7.7.10-6ubuntu3.13+esm16",
"8:6.7.7.10-6ubuntu3.13+esm17",
"8:6.7.7.10-6ubuntu3.13+esm18",
"8:6.7.7.10-6ubuntu3.13+esm19",
"8:6.7.7.10-6ubuntu3.13+esm20",
"8:6.7.7.10-6ubuntu3.13+esm21",
"8:6.7.7.10-6ubuntu3.13+esm22",
"8:6.7.7.10-6ubuntu3.13+esm23",
"8:6.7.7.10-6ubuntu3.13+esm24",
"8:6.7.7.10-6ubuntu3.13+esm25",
"8:6.7.7.10-6ubuntu3.13+esm26",
"8:6.7.7.10-6ubuntu3.13+esm27"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "imagemagick",
"binary_version": "8:6.8.9.9-7ubuntu5.16+esm26"
},
{
"binary_name": "imagemagick-6.q16",
"binary_version": "8:6.8.9.9-7ubuntu5.16+esm26"
},
{
"binary_name": "imagemagick-common",
"binary_version": "8:6.8.9.9-7ubuntu5.16+esm26"
},
{
"binary_name": "libimage-magick-perl",
"binary_version": "8:6.8.9.9-7ubuntu5.16+esm26"
},
{
"binary_name": "libimage-magick-q16-perl",
"binary_version": "8:6.8.9.9-7ubuntu5.16+esm26"
},
{
"binary_name": "libmagick++-6-headers",
"binary_version": "8:6.8.9.9-7ubuntu5.16+esm26"
},
{
"binary_name": "libmagick++-6.q16-5v5",
"binary_version": "8:6.8.9.9-7ubuntu5.16+esm26"
},
{
"binary_name": "libmagickcore-6-arch-config",
"binary_version": "8:6.8.9.9-7ubuntu5.16+esm26"
},
{
"binary_name": "libmagickcore-6-headers",
"binary_version": "8:6.8.9.9-7ubuntu5.16+esm26"
},
{
"binary_name": "libmagickcore-6.q16-2",
"binary_version": "8:6.8.9.9-7ubuntu5.16+esm26"
},
{
"binary_name": "libmagickcore-6.q16-2-extra",
"binary_version": "8:6.8.9.9-7ubuntu5.16+esm26"
},
{
"binary_name": "libmagickwand-6-headers",
"binary_version": "8:6.8.9.9-7ubuntu5.16+esm26"
},
{
"binary_name": "libmagickwand-6.q16-2",
"binary_version": "8:6.8.9.9-7ubuntu5.16+esm26"
},
{
"binary_name": "perlmagick",
"binary_version": "8:6.8.9.9-7ubuntu5.16+esm26"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "imagemagick",
"purl": "pkg:deb/ubuntu/imagemagick@8:6.8.9.9-7ubuntu5.16+esm26?arch=source\u0026distro=esm-infra-legacy/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8:6.8.9.9-5ubuntu2",
"8:6.8.9.9-6",
"8:6.8.9.9-6build1",
"8:6.8.9.9-7",
"8:6.8.9.9-7ubuntu1",
"8:6.8.9.9-7ubuntu2",
"8:6.8.9.9-7ubuntu3",
"8:6.8.9.9-7ubuntu4",
"8:6.8.9.9-7ubuntu5",
"8:6.8.9.9-7ubuntu5.1",
"8:6.8.9.9-7ubuntu5.2",
"8:6.8.9.9-7ubuntu5.3",
"8:6.8.9.9-7ubuntu5.4",
"8:6.8.9.9-7ubuntu5.5",
"8:6.8.9.9-7ubuntu5.6",
"8:6.8.9.9-7ubuntu5.7",
"8:6.8.9.9-7ubuntu5.8",
"8:6.8.9.9-7ubuntu5.9",
"8:6.8.9.9-7ubuntu5.11",
"8:6.8.9.9-7ubuntu5.12",
"8:6.8.9.9-7ubuntu5.13",
"8:6.8.9.9-7ubuntu5.14",
"8:6.8.9.9-7ubuntu5.15",
"8:6.8.9.9-7ubuntu5.16",
"8:6.8.9.9-7ubuntu5.16+esm1",
"8:6.8.9.9-7ubuntu5.16+esm2",
"8:6.8.9.9-7ubuntu5.16+esm3",
"8:6.8.9.9-7ubuntu5.16+esm4",
"8:6.8.9.9-7ubuntu5.16+esm5",
"8:6.8.9.9-7ubuntu5.16+esm6",
"8:6.8.9.9-7ubuntu5.16+esm7",
"8:6.8.9.9-7ubuntu5.16+esm8",
"8:6.8.9.9-7ubuntu5.16+esm9",
"8:6.8.9.9-7ubuntu5.16+esm10",
"8:6.8.9.9-7ubuntu5.16+esm11",
"8:6.8.9.9-7ubuntu5.16+esm12",
"8:6.8.9.9-7ubuntu5.16+esm13",
"8:6.8.9.9-7ubuntu5.16+esm14",
"8:6.8.9.9-7ubuntu5.16+esm15",
"8:6.8.9.9-7ubuntu5.16+esm16",
"8:6.8.9.9-7ubuntu5.16+esm17",
"8:6.8.9.9-7ubuntu5.16+esm18",
"8:6.8.9.9-7ubuntu5.16+esm19",
"8:6.8.9.9-7ubuntu5.16+esm20",
"8:6.8.9.9-7ubuntu5.16+esm21",
"8:6.8.9.9-7ubuntu5.16+esm22",
"8:6.8.9.9-7ubuntu5.16+esm23",
"8:6.8.9.9-7ubuntu5.16+esm24",
"8:6.8.9.9-7ubuntu5.16+esm25",
"8:6.8.9.9-7ubuntu5.16+esm26"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "imagemagick",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "imagemagick-6-common",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "imagemagick-6.q16",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "imagemagick-6.q16hdri",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "imagemagick-common",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libimage-magick-perl",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libimage-magick-q16-perl",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libimage-magick-q16hdri-perl",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libmagick++-6-headers",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libmagick++-6.q16-7",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libmagick++-6.q16hdri-7",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libmagickcore-6-arch-config",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libmagickcore-6-headers",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libmagickcore-6.q16-3",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libmagickcore-6.q16-3-extra",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libmagickcore-6.q16hdri-3",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libmagickcore-6.q16hdri-3-extra",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libmagickwand-6-headers",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libmagickwand-6.q16-3",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "libmagickwand-6.q16hdri-3",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
},
{
"binary_name": "perlmagick",
"binary_version": "8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "imagemagick",
"purl": "pkg:deb/ubuntu/imagemagick@8:6.9.7.4+dfsg-16ubuntu6.15+esm18?arch=source\u0026distro=esm-infra/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8:6.9.7.4+dfsg-16ubuntu2",
"8:6.9.7.4+dfsg-16ubuntu3",
"8:6.9.7.4+dfsg-16ubuntu4",
"8:6.9.7.4+dfsg-16ubuntu5",
"8:6.9.7.4+dfsg-16ubuntu6",
"8:6.9.7.4+dfsg-16ubuntu6.2",
"8:6.9.7.4+dfsg-16ubuntu6.3",
"8:6.9.7.4+dfsg-16ubuntu6.4",
"8:6.9.7.4+dfsg-16ubuntu6.7",
"8:6.9.7.4+dfsg-16ubuntu6.8",
"8:6.9.7.4+dfsg-16ubuntu6.9",
"8:6.9.7.4+dfsg-16ubuntu6.11",
"8:6.9.7.4+dfsg-16ubuntu6.12",
"8:6.9.7.4+dfsg-16ubuntu6.13",
"8:6.9.7.4+dfsg-16ubuntu6.14",
"8:6.9.7.4+dfsg-16ubuntu6.15",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm1",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm2",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm3",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm4",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm5",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm6",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm7",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm8",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm9",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm10",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm11",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm12",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm13",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm14",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm15",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm16",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm17",
"8:6.9.7.4+dfsg-16ubuntu6.15+esm18"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "imagemagick",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "imagemagick-6-common",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "imagemagick-6.q16",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "imagemagick-6.q16hdri",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "imagemagick-common",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libimage-magick-perl",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libimage-magick-q16-perl",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libimage-magick-q16hdri-perl",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libmagick++-6-headers",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libmagick++-6.q16-8",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libmagick++-6.q16hdri-8",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libmagickcore-6-arch-config",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libmagickcore-6-headers",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libmagickcore-6.q16-6",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libmagickcore-6.q16-6-extra",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libmagickcore-6.q16hdri-6",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libmagickcore-6.q16hdri-6-extra",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libmagickwand-6-headers",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libmagickwand-6.q16-6",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "libmagickwand-6.q16hdri-6",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
},
{
"binary_name": "perlmagick",
"binary_version": "8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "imagemagick",
"purl": "pkg:deb/ubuntu/imagemagick@8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16?arch=source\u0026distro=esm-apps/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8:6.9.10.23+dfsg-2.1ubuntu3",
"8:6.9.10.23+dfsg-2.1ubuntu8",
"8:6.9.10.23+dfsg-2.1ubuntu9",
"8:6.9.10.23+dfsg-2.1ubuntu10",
"8:6.9.10.23+dfsg-2.1ubuntu11",
"8:6.9.10.23+dfsg-2.1ubuntu11.1",
"8:6.9.10.23+dfsg-2.1ubuntu11.2",
"8:6.9.10.23+dfsg-2.1ubuntu11.4",
"8:6.9.10.23+dfsg-2.1ubuntu11.4+esm1",
"8:6.9.10.23+dfsg-2.1ubuntu11.5",
"8:6.9.10.23+dfsg-2.1ubuntu11.6",
"8:6.9.10.23+dfsg-2.1ubuntu11.6+esm1",
"8:6.9.10.23+dfsg-2.1ubuntu11.7",
"8:6.9.10.23+dfsg-2.1ubuntu11.7+esm1",
"8:6.9.10.23+dfsg-2.1ubuntu11.9",
"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm1",
"8:6.9.10.23+dfsg-2.1ubuntu11.9+esm2",
"8:6.9.10.23+dfsg-2.1ubuntu11.10",
"8:6.9.10.23+dfsg-2.1ubuntu11.10+esm1",
"8:6.9.10.23+dfsg-2.1ubuntu11.11",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm1",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm2",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm3",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm4",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm5",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm6",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm7",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm8",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm9",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm10",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm11",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm12",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm13",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm14",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm15",
"8:6.9.10.23+dfsg-2.1ubuntu11.11+esm16"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "imagemagick",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "imagemagick-6-common",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "imagemagick-6.q16",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "imagemagick-6.q16hdri",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "imagemagick-common",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libimage-magick-perl",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libimage-magick-q16-perl",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libimage-magick-q16hdri-perl",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libmagick++-6-headers",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libmagick++-6.q16-8",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libmagick++-6.q16hdri-8",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libmagickcore-6-arch-config",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libmagickcore-6-headers",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libmagickcore-6.q16-6",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libmagickcore-6.q16-6-extra",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libmagickcore-6.q16hdri-6",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libmagickcore-6.q16hdri-6-extra",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libmagickwand-6-headers",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libmagickwand-6.q16-6",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "libmagickwand-6.q16hdri-6",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
},
{
"binary_name": "perlmagick",
"binary_version": "8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:22.04:LTS",
"name": "imagemagick",
"purl": "pkg:deb/ubuntu/imagemagick@8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16?arch=source\u0026distro=esm-apps/jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8:6.9.11.60+dfsg-1ubuntu1",
"8:6.9.11.60+dfsg-1.3",
"8:6.9.11.60+dfsg-1.3build1",
"8:6.9.11.60+dfsg-1.3build2",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.1+esm1",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.2+esm1",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm1",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm2",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.3+esm3",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm1",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm2",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm3",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm4",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm5",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm6",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm7",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm8",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm9",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm10",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm11",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm12",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm13",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm14",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm15",
"8:6.9.11.60+dfsg-1.3ubuntu0.22.04.5+esm16"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "imagemagick",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "imagemagick-6-common",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "imagemagick-6.q16",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "imagemagick-6.q16hdri",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libimage-magick-perl",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libimage-magick-q16-perl",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libimage-magick-q16hdri-perl",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libmagick++-6-headers",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libmagick++-6.q16-9t64",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libmagick++-6.q16hdri-9t64",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libmagickcore-6-arch-config",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libmagickcore-6-headers",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libmagickcore-6.q16-7-extra",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libmagickcore-6.q16-7t64",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libmagickcore-6.q16hdri-7-extra",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libmagickcore-6.q16hdri-7t64",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libmagickwand-6-headers",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libmagickwand-6.q16-7t64",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "libmagickwand-6.q16hdri-7t64",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
},
{
"binary_name": "perlmagick",
"binary_version": "8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:24.04:LTS",
"name": "imagemagick",
"purl": "pkg:deb/ubuntu/imagemagick@8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15?arch=source\u0026distro=esm-apps/noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8:6.9.11.60+dfsg-1.6ubuntu1",
"8:6.9.12.98+dfsg1-5",
"8:6.9.12.98+dfsg1-5.2build1",
"8:6.9.12.98+dfsg1-5.2build2",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm1",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm2",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm3",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm4",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm5",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm6",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm7",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm8",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm9",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm10",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm11",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm12",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm13",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm14",
"8:6.9.12.98+dfsg1-5.2ubuntu0.1~esm15"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "imagemagick",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "imagemagick-7-common",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "imagemagick-7.q16",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "imagemagick-7.q16hdri",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libimage-magick-perl",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libimage-magick-q16-perl",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libimage-magick-q16hdri-perl",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libmagick++-7-headers",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libmagick++-7.q16-5",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libmagick++-7.q16hdri-5",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libmagickcore-7-arch-config",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libmagickcore-7-headers",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libmagickcore-7.q16-10",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libmagickcore-7.q16-10-extra",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libmagickcore-7.q16hdri-10",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libmagickcore-7.q16hdri-10-extra",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libmagickwand-7-headers",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libmagickwand-7.q16-10",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "libmagickwand-7.q16hdri-10",
"binary_version": "8:7.1.2.31+dfsg1-1"
},
{
"binary_name": "perlmagick",
"binary_version": "8:7.1.2.31+dfsg1-1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.10",
"name": "imagemagick",
"purl": "pkg:deb/ubuntu/imagemagick@8:7.1.2.31+dfsg1-1?arch=source\u0026distro=stonking"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8:7.1.2.18+dfsg1-1",
"8:7.1.2.25+dfsg1-2",
"8:7.1.2.27+dfsg1-1",
"8:7.1.2.31+dfsg1-1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "imagemagick",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "imagemagick-7-common",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "imagemagick-7.q16",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "imagemagick-7.q16hdri",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libimage-magick-perl",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libimage-magick-q16-perl",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libimage-magick-q16hdri-perl",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libmagick++-7-headers",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libmagick++-7.q16-5",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libmagick++-7.q16hdri-5",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libmagickcore-7-arch-config",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libmagickcore-7-headers",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libmagickcore-7.q16-10",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libmagickcore-7.q16-10-extra",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libmagickcore-7.q16hdri-10",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libmagickcore-7.q16hdri-10-extra",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libmagickwand-7-headers",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libmagickwand-7.q16-10",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "libmagickwand-7.q16hdri-10",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
},
{
"binary_name": "perlmagick",
"binary_version": "8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:26.04:LTS",
"name": "imagemagick",
"purl": "pkg:deb/ubuntu/imagemagick@8:7.1.2.18+dfsg1-1ubuntu0.1~esm4?arch=source\u0026distro=esm-apps/resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"8:7.1.2.3+dfsg1-1",
"8:7.1.2.8+dfsg1-1",
"8:7.1.2.12+dfsg1-1",
"8:7.1.2.13+dfsg1-1",
"8:7.1.2.15+dfsg1-1",
"8:7.1.2.16+dfsg1-1",
"8:7.1.2.18+dfsg1-1",
"8:7.1.2.18+dfsg1-1ubuntu0.1~esm1",
"8:7.1.2.18+dfsg1-1ubuntu0.1~esm2",
"8:7.1.2.18+dfsg1-1ubuntu0.1~esm3",
"8:7.1.2.18+dfsg1-1ubuntu0.1~esm4"
]
}
],
"aliases": [],
"details": "ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy restrictions to be bypassed. Local attackers who can create a symlink can point it at a policy-restricted path to evade the configured policy.",
"id": "UBUNTU-CVE-2026-105081",
"modified": "2026-10-12T13:17:00Z",
"published": "2026-10-12T13:17:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-105081"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-105081"
},
{
"type": "REPORT",
"url": "https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-79p5-w6jv-r997"
},
{
"type": "REPORT",
"url": "https://www.vulncheck.com/advisories/imagemagick-before-7.1.2-33-policy-bypass-via-symlink-in-isrightsauthorizedbyname"
}
],
"related": [],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
"type": "CVSS_V3"
},
{
"score": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
"type": "CVSS_V4"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-105081"
]
}
WID-SEC-W-2026-3867
Vulnerability from csaf_certbund - Published: 2026-10-11 22:00 - Updated: 2026-10-13 22:00Summary
ImageMagick: Mehrere Schwachstellen
Severity
Hoch
Scope
3 vulnerabilities in this advisory, including CVE-2026-105081.
CVE-2026-105081
Known affected: 2 products