Skip to content
OpenAdvisories
Medium WID-SEC-2026-1866 6 CVEs

ImageMagick: Mehrere Schwachstellen

Published Jun 9, 2026 · Updated Nov 2, 2026 · Revision 10 · de-DE

Vendor: amazon Vendor: Debian Vendor: SUSE Product: Linux Product: Linux Product: Linux 2 Product: openSUSE Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ImageMagick ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder vertrauliche Informationen offenzulegen.

Product

ImageMagick ist eine Sammlung von Programmbibliotheken und Werkzeugen, die Grafiken in zahlreichen Formaten verarbeiten kann.

Vulnerabilities 6

  • High 7.5
    CVE-2026-53460

    ImageMagick: Policy Bypass can trigger out-of-Memory condition

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, a missing check for maximum memory request in AcquireAlignedMemory could trigger an out-of-Memory condition. This issue ha…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • High 7.5
    CVE-2026-53461

    ImageMagick: Out-of-bounds write in ICON decoder due to incorrect loop

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, an incorrect loop in the ICON decoder can result in an out of bounds heap write resulting in a crash. This issue has been …

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 6.2
    CVE-2026-53465

    ImageMagick: Heap Buffer Over-Write in SF3 encoder when writing multi-frame image

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, a crafted multi-frame can result in a heap buffer over-write when encoding it with the SF3 encoder. This issue has been patched in versio…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 5.9
    CVE-2026-53462

    ImageMagick: Use-After-Free when allocation in CheckPrimitiveExtent fails

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when an allocation fails in CheckPrimitiveExtent this can result in a heap-use-after-free and result in a crash. This issu…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 4.3
    CVE-2026-53463

    ImageMagick: Null Pointer Dereference in distort operation when passing incorrect arguments

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-50 and 7.1.2-25, when passing incorrect arguments in the distort operation a null pointer deference will occur. This issue has been patched…

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet
  • Medium 4.0
    CVE-2026-53464

    ImageMagick: Memory Leak in wand option parser when providing invalid arguments

    ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-25, when providing invalid options to the wand option parser a small memory leak will occur. This issue has been patched in version 7.1.2-25.

    ImageMagick ImageMagick imagemagick imagemagick Debian Ubuntu Alpine NuGet

Revision history

  1. #10

    Neue Updates von openSUSE aufgenommen

  2. #9

    Neue Updates von SUSE aufgenommen

  3. #8

    Neue Updates von SUSE aufgenommen

  4. #7

    Neue Updates von SUSE aufgenommen

  5. #6

    Neue Updates von openSUSE aufgenommen

  6. #5

    Neue Updates von Debian und SUSE aufgenommen

  7. #4

    Neue Updates von Amazon aufgenommen

  8. #3

    Neue Updates von Debian aufgenommen

  9. #2

    Referenz(en) aufgenommen: EUVD-2026-36189, EUVD-2026-36188, EUVD-2026-36187, EUVD-2026-36192, EUVD-2026-36191, EUVD-2026-36190

  10. #1

    Initiale Fassung

References