rpm package
opensuse/ImageMagick&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/ImageMagick&distro=openSUSE%20Tumbleweed
Vulnerabilities (257)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-107210 | Med | 5.3 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit, bypassing resour | |
| CVE-2026-107209 | Med | 5.9 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause the RSVG decoder to free image state twice | |
| CVE-2026-107208 | Med | 5.3 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processin | |
| CVE-2026-106580 | Med | 4.0 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a c | |
| CVE-2026-106579 | Med | 6.2 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially allowing data prohibited by the policy to be read. | |
| CVE-2026-106578 | Med | 5.9 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. This issue is fixed in versions 7.1.2-31 and 6.9.13-56. | |
| CVE-2026-106577 | Med | 5.3 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, unescaped or untrimmed values can inject code into output generated by PostScript coders. This issue is fixed in versions 7.1.2-31 and 6.9.13-56. | |
| CVE-2026-106576 | Med | 5.3 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted XMP profile can trigger excessive work while the parser determines a rational value's numerator and denominator, causing denial of service. This issue is fi | |
| CVE-2026-106575 | Med | 5.3 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed i | |
| CVE-2026-106574 | Med | 5.3 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, cras | |
| CVE-2026-106573 | Med | 5.3 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long-running operation. This issue is fixed in versions 7. | |
| CVE-2026-106572 | Med | 5.3 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process. This issue is fixed | |
| CVE-2026-106571 | Med | 5.1 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process. T | |
| CVE-2026-106570 | Med | 4.3 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of servi | |
| CVE-2026-106569 | Med | 5.3 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, missing validation and resource checks in the ASE decoder allow a crafted ASE image to cause a crash or a long-running operation. This issue is fixed in version 7.1.2 | |
| CVE-2026-106568 | Med | 5.3 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop, preventing image processing from completing. This iss | |
| CVE-2026-106567 | Med | 5.9 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This iss | |
| CVE-2026-106566 | Med | 4.0 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICK_SHRED_PASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. This | |
| CVE-2026-106565 | Med | 5.9 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed i | |
| CVE-2026-106564 | Med | 5.3 | < 7.1.2.32-1.1 | 7.1.2.32-1.1 | Oct 7, 2026 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash. This issue is fixed in version 7.1.2-32. |
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted highly compressed MAT image can make the MAT decoder create temporary files larger than the configured security-policy limit, bypassing resour
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, when ImageMagick is built without Cairo support, a crafted RSVG image that reaches a resource limit can cause the RSVG decoder to free image state twice
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted XMP profile can reach a recursion limit that is handled as a fatal condition instead of an ordinary exception, terminating the image-processin
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a c
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can bypass an ImageMagick security policy that uses coder as its domain, potentially allowing data prohibited by the policy to be read.
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in the MVG decoder and crash the process. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, unescaped or untrimmed values can inject code into output generated by PostScript coders. This issue is fixed in versions 7.1.2-31 and 6.9.13-56.
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted XMP profile can trigger excessive work while the parser determines a rational value's numerator and denominator, causing denial of service. This issue is fi
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain unclosed, allowing repeated processing to exhaust available file descriptors. This issue is fixed i
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send crafted pixel data that triggers an integer-size calculation error and a heap buffer overwrite, cras
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a crafted MVG image to trigger an excessively long-running operation. This issue is fixed in versions 7.
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process. This issue is fixed
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a crafted local call to the GetVirtualPixels API can trigger an integer calculation error and write beyond a heap buffer, crashing the server process. T
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect to the distributed pixel cache server and exhaust its available connections, causing denial of servi
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, missing validation and resource checks in the ASE decoder allow a crafted ASE image to cause a crash or a long-running operation. This issue is fixed in version 7.1.2
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop, preventing image processing from completing. This iss
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion error in the PSD decoder on 32-bit builds, causing an infinite loop and denial of service. This iss
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICK_SHRED_PASSES environment variable, allowing a local privileged workflow to overwrite a file with random data. This
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop and exhaust processing resources. This issue is fixed i
- affected < 7.1.2.32-1.1fixed 7.1.2.32-1.1
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can cause the EXR decoder to write beyond a heap buffer, causing the process to crash. This issue is fixed in version 7.1.2-32.
Page 1 of 13