This update for ImageMagick fixes the following issues:
- CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912).
- CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of
service (bsc#1281909).
- CVE-2026-93588: NULL pointer dereference in the PNM coder can lead to a denial of service (bsc#1281910).
- CVE-2026-93589: division-by-zero flaw in the FLIF encoder can lead to a denial of service (bsc#1281911).
- CVE-2026-105083: security policy not applied when a user changes the DOCTYPE in the `policy.xml` file to something
else that is
This update for ImageMagick fixes the following issues:
- CVE-2026-86420: Denial of Service due to memory budget exhaustion (bsc#1279696).
- CVE-2026-86421: Denial of Service via memory leak in MSL decoder (bsc#1279711).
- CVE-2026-86423: Denial of service via heap-use-after-free in PerlMagick's GetList method (bsc#1279794).
- CVE-2026-86425: Denial of Service due to heap-use-after-free vulnerability (bsc#1279797).
- CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912).
- CVE-2026-93587: policy bypass in the PCD, CUBE and HALD coders can lead to extra memory allocation and a denial of
servic
This update for ImageMagick fixes the following issues:
- CVE-2026-86420: denial of Service due to memory budget exhaustion (bsc#1279696).
- CVE-2026-86421: denial of Service via memory leak in MSL decoder (bsc#1279711).
- CVE-2026-86423: denial of service via heap-use-after-free in PerlMagick's GetList method (bsc#1279794).
- CVE-2026-86425: denial of Service due to heap-use-after-free vulnerability (bsc#1279797).
This update for ImageMagick fixes the following issue:
- CVE-2026-64685: heap buffer over-read in BGR decoder due to missing end-of-file check (bsc#1272953).
This update for ImageMagick fixes the following issue:
- CVE-2026-64685: heap buffer overread in BGR decoder due to missing end-of-file check (bsc#1272953).
This update for ImageMagick fixes the following issues:
- CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575).
- CVE-2026-62363: heap buffer overwrite in fx operation when processing a crafted argument (bsc#1272582).
- CVE-2026-62946: integer overflow in JNX decoder can lead to heap buffer overwrite when processing extremely large
files on 32-bit builds (bsc#1272580).
- CVE-2026-66011: memory leak in the magick command-line interface when invalid options are provided (bsc#1272577).
- GHSA-hc76-7mpc-qjqh: code injection in HTML encoder due to incomplete fix of CVE-2026-25797 (bsc#12
This update for ImageMagick fixes the following issues:
- CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575).
- CVE-2026-62946: integer overflow in JNX decoder can lead to heap buffer overwrite when processing extremely large
files on 32-bit builds (bsc#1272580).
- GHSA-hc76-7mpc-qjqh: code injection in HTML encoder due to incomplete fix of CVE-2026-25797 (bsc#1272579).
This update for ImageMagick fixes the following issues
- CVE-2026-56375: possible memory leak in ASHLAR coder when action fails (bsc#1271495).
- CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
- CVE-2026-61859: policy bypass in script operation due to missing checks (bsc#1271497).
- CVE-2026-61860: use-after-free when `freetype` initialization fails (bsc#1271494).
- CVE-2026-61862: information disclosure when printing profiles with debug enabled (bsc#1271493).
- CVE-2026-61863: memory leak in TIFF encoder when a temporary file could not be created (bsc#1271492).
- CVE-2026-61864: memory leak in c
This update for ImageMagick fixes the following issues
- CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
- CVE-2026-56362: heap buffer overflow read in `GetPixelIndex` due to metadata-cache desynchronization in
`OpenPixelCache` (bsc#1271100).
- CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
- CVE-2026-56372: heap buffer overflow read in magnify operation via unrecognized `magnify:method` value (bsc#1271314).
- CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
- CVE-2026-56375: possible memory leak in ASHLAR coder when action
This update for ImageMagick fixes the following issues
- CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read
(bsc#1270073).
- CVE-2026-53467: allocated memory left unchanged in the MNG decoder can lead to a heap information disclosure
(bsc#1270074).
- CVE-2026-55594: missing depth check in the MVG decoder will result in a stack overflow when a crafted image is
provided (bsc#1270077).
- CVE-2026-55595: providing invalid arguments to the `connected-components` option can lead to an infinite loop
(bsc#1270079).
- CVE-2026-55597: incorrect handling of arguments can cause a
This update for ImageMagick fixes the following issues:
- CVE-2026-53466: integer overflow in the XCF decoder can result in an out-of-bounds read when a crafted image is read
(bsc#1270073).
- CVE-2026-53467: allocated memory left unchanged in the MNG decoder can lead to a heap information disclosure
(bsc#1270074).
- CVE-2026-55594: missing depth check in the MVG decoder will result in a stack overflow when a crafted image is
provided (bsc#1270077).
- CVE-2026-55595: providing invalid arguments to the `connected-components` option can lead to an infinite loop
(bsc#1270079).
- CVE-2026-55597: incorrect handling of arguments can cause a
This update for ImageMagick fixes the following issues
This update for ImageMagick fixes the following issues
- CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing (bsc#1262154).
- CVE-2026-33900: Denial of Service via integer truncation in viff encoder (bsc#1262156).
- CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder (bsc#1262155).
- CVE-2026-33908: Denial of Service via deeply nested XML file processing (bsc#1262152).
- CVE-2026-34238: Denial of Service via integer overflow in despeckle operation (bsc#1262147).
- CVE-2026-40169: Denial of Service via crafted image leading to out-of-bounds
This update for ImageMagick fixes the following issues:
- CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing (bsc#1262154).
- CVE-2026-33900: Denial of Service via integer truncation in viff encoder (bsc#1262156).
- CVE-2026-33901: Denial of Service due to heap buffer overflow in MVG decoder (bsc#1262155).
- CVE-2026-33902: Denial of Service via deeply nested expression in FX parser (bsc#1262153).
- CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation (bsc#1262097).
- CVE-2026-33908: Denial of Service via deeply nested XML file processing (bsc#1262152).
- CVE-2026-34238: Denial of Service via in
This update for ImageMagick fixes the following issues:
- CVE-2026-24484: denial of service via multi-layer nested MVG to SVG conversion (bsc#1258790).
- CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446).
- CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow
(bsc#1259447).
- CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow
(bsc#1259448).
- CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450).
- CVE-2026-28688: heap use-
This update for ImageMagick fixes the following issues:
- CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790).
- CVE-2026-28493: integer overflow in the SIXEL decoder leads to out-of-bounds write (bsc#1259446).
- CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow
(bsc#1259447).
- CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow
(bsc#1259448).
- CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450).
- CVE-2026-28
This update for ImageMagick fixes the following issues:
- CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743).
- CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790).
- CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791).
- CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748).
- CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759).
- CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793).
- CVE-2026-25795: Denial of S
This update for ImageMagick fixes the following issues:
- CVE-2026-24481: Possible Heap Information Disclosure in PSD ZIP Decompression (bsc#1258743).
- CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790).
- CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791).
- CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748).
- CVE-2026-25637: Denial of Service via crafted image due to memory leak (bsc#1258759).
- CVE-2026-25638: Denial of Service due to memory leak in image processing (bsc#1258793).
- CVE-2026-25795: Denial of S
This update for ImageMagick fixes the following issues:
- CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976).
- CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow (bsc#1256962).
- CVE-2026-23952: processing comment tag can cause null pointer dereference (bsc#1257076).