CVE-2026-109268

概要

参考情報

• ImageMagick/ImageMagick commit 3285d69 · Patch
• ImageMagick/ImageMagick security advisory · Vendor Advisory
• ImageMagick/ImageMagick6 commit 966e227 · Patch
• vulncheck.com/advisories/imagemagick-before-6.9.13-57-and-7-x-before-7.1.2-32-use-after-free-in-pdf-writer-via-jpeg2000 · Patch

imagemagick のその他の脆弱性

• CVE-2026-119124中 5.5ImageMagick before 7.1.2-34 contains a heap-based buffer overflow in its -morph processing, where crafted images cause writes beyond the bou…
• CVE-2026-119123高 7.5ImageMagick before 7.1.2-34 contains a stack overflow vulnerability in the TIFF decoder that occurs when the DNG decoder is disabled. Attack…
• CVE-2026-116158中 5.5ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the magick compare command caused by missing cleanup when an operation f…
• CVE-2026-109267中 5.5ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fa…
• CVE-2026-109266低 3.6ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection vulnerability in the CIP encoder, which does not properly esc…