7.5
Élevée
CVE-2026-25985 ImageMagick is free and open-source software used for editing and manipulating digital images
Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a crafted SVG file containing an malicious element causes ImageMagick to attempt to allocate ~674 GB of memory, leading to an out-of-memory abort. Versions 7.1.2-15 and 6.9.13-40 contain a patch.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Enterprise Linux Server (v. 7 ELS) | Versions non publiées | |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Versions non publiées | |
| Red Hat Enterprise Linux 6 | Versions non publiées | |
| ImageMagick 7.0 | 7.0.0 → < 7.1.2-15 | 7.1.2-15 |
| ImageMagick 6.9 | premières → < 6.9.13-40 | 6.9.13-40 |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions non publiées |
Références
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat Enterprise Linux Server (v. 7 ELS)
Les 214 CVE de Red Hat Enterprise Linux Server (v. 7 ELS) →
CVE-2026-56379
ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows…
9.2
Critique
CVE-2026-56208
Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
7.6
Élevée
CVE-2026-12329
Memory safety bug fixed in Thunderbird ESR 140.12
5.3
Moyenne
CVE-2026-12328
Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and…
8.1
Élevée