CVE-2026-109266

概要

参考情報

• ImageMagick/ImageMagick commit 45bb732 · Patch
• ImageMagick/ImageMagick security advisory · Vendor Advisory
• ImageMagick/ImageMagick6 commit 30499e6 · Patch
• vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-code-injection-via-cip-encoder · Third Party Advisory

imagemagick のその他の脆弱性

• CVE-2026-119124中 5.5ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bou…
• CVE-2026-119123高 7.5ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attack…
• CVE-2026-116160低 3.3ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a heap-based buffer overflow in the X11 animate operation when processing craf…
• CVE-2026-116159低 3.3ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the handling of the -cdl (color decision list) option, where …
• CVE-2026-116158中 5.5ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation f…