This update for ImageMagick fixes the following issues:
- CVE-2026-93586: use-after-free in the `ImagesToBlob` method can lead to a process crash (bsc#1281912).
- CVE-2026-106565: a missing end-of-file check while reading bzip2-compressed image data can cause an infinite loop
(bsc#1284662).
- CVE-2026-106567: a crafted PSD file can trigger an integer-conversion error in the PSD decoder, causing an infinite
loop and DoS (bsc#1284664).
- CVE-2026-106568: a crafted XMP profile embedded in an image can cause the profile parser to enter an infinite loop
(bsc#1284665).
- CVE-2026-106571: a crafted local call to the GetVirtualPixels API can t
This update for ImageMagick fixes the following issues:
- CVE-2026-86420: denial of Service due to memory budget exhaustion (bsc#1279696).
- CVE-2026-86421: denial of Service via memory leak in MSL decoder (bsc#1279711).
- CVE-2026-86423: denial of service via heap-use-after-free in PerlMagick's GetList method (bsc#1279794).
- CVE-2026-86425: denial of Service due to heap-use-after-free vulnerability (bsc#1279797).
This update for ImageMagick fixes the following issues:
- CVE-2026-62343: heap buffer overwrite in morphology operation when an invalid kernel is provided (bsc#1272575).
- CVE-2026-62946: integer overflow in JNX decoder can lead to heap buffer overwrite when processing extremely large
files on 32-bit builds (bsc#1272580).
- code injection in HTML encoder due to incomplete fix of CVE-2026-25797 (bsc#1272579).
This update for ImageMagick fixes the following issues
- CVE-2026-55628: policy bypass in concatenate operation due to missing checks (bsc#1270081).
- CVE-2026-56362: heap buffer overflow read in `GetPixelIndex` due to metadata-cache desynchronization in
`OpenPixelCache` (bsc#1271100).
- CVE-2026-56366: META reader memory leak in the APP1JPEG input path (bsc#1271316).
- CVE-2026-56373: possible use-after-free write in PDB decoder (bsc#1268640 bsc#1271315).
- CVE-2026-56377: policy bypass can create or truncate files (bsc#1270006).
- CVE-2026-61464: heap buffer overwrite in X11 import with crafted window title (bsc#1271496).
- CVE-2026-6185
This update for ImageMagick fixes the following issues
- CVE-2026-42050: stack buffer overflow in XTileImage (bsc#1265048).
- CVE-2026-42326: information disclosure via malicious IPTC input file (bsc#1268092).
- CVE-2026-45031: denial of Service due to resource policy bypass in PSD decoder (bsc#1268094).
- CVE-2026-45358: off by one in the meta encoder could result in an out of bounds read of a single byte in the meta
encoder (bsc#1268102).
- CVE-2026-45624: data exposure due to image processing vulnerability (bsc#1268096).
- CVE-2026-45664: denial of Service due to excessive resource use in MNG coder (bsc#1268101).
- CVE-2026-46520: denia
This update for ImageMagick fixes the following issues:
- CVE-2026-33899: Denial of Service via out-of-bounds write in XML parsing (bsc#1262154).
- CVE-2026-33900: Denial of Service via integer truncation in viff encoder (bsc#1262156).
- CVE-2026-33905: Denial of service via out-of-bounds read in -sample operation (bsc#1262097).
- CVE-2026-33908: Denial of Service via deeply nested XML file processing (bsc#1262152).
- CVE-2026-34238: Denial of Service via integer overflow in despeckle operation (bsc#1262147).
- CVE-2026-40311: Denial of Service via heap use-after-free in XMP profile processing (bsc#1262146).
This update for ImageMagick fixes the following issues:
- CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790).
- CVE-2026-28494: missing bounds checks in the morphology kernel parsing functions can lead to a stack buffer overflow
(bsc#1259447).
- CVE-2026-28686: undersized output buffer allocation in the PCL encoder can lead to a heap buffer overflow
(bsc#1259448).
- CVE-2026-28687: heap use-after-free vulnerability in the MSL decoder via a crafted MSL file (bsc#1259450).
- CVE-2026-28688: heap use-after-free in the MSL encoder when a cloned image is destroyed twice (bsc#1259451).
-
This update for ImageMagick fixes the following issues:
- CVE-2026-24484: denial of service vulnerability via multi-layer nested MVG to SVG conversion (bsc#1258790).
- CVE-2026-24485: denial of service via malformed PCD file processing (bsc#1258791).
- CVE-2026-25576: Out of bounds read in multiple coders that read raw pixel data (bsc#1258748).
- CVE-2026-25795: Denial of Service due to NULL pointer dereference during temporary file creation failure
(bsc#1258792).
- CVE-2026-25796: Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths
(bsc#1258757).
- CVE-2026-25797: Code injection in various enco
This update for ImageMagick fixes the following issues:
- CVE-2026-23874: manipulation of digital images can lead to stack overflow (bsc#1256976).
- CVE-2026-23876: maliciously crafted image can lead to heap buffer overflow (bsc#1256962).
- CVE-2026-23952: processing comment tag can cause null pointer dereference (bsc#1257076).
This update for ImageMagick fixes the following issues:
- CVE-2025-68469: crash due to heap buffer overflow when processing a specially crafted TIFF file (bsc#1255391).
This update for ImageMagick fixes the following issues:
- CVE-2025-66628: possible integer overflow in the TIM image parser's `ReadTIMImage` function can lead to arbitrary
memory disclosure on 32-bit systems (bsc#1254820).
This update for ImageMagick fixes the following issues:
- CVE-2025-55005: Fixed heap buffer overflow when transforming from Log to sRGB colorspaces (bsc#1248077).
- CVE-2025-55154: Fixed integer overflow when performing magnified size calculations in ReadOneMNGIMage (bsc#1248078).
- CVE-2025-55160: Fixed undefined behavior due to function-type-mismatch in CloneSplayTree (bsc#1248079).
- CVE-2025-55212: Fixed division-by-zero in ThumbnailImage() when passing a geometry string containing only a colon to
`montage -geometry` (bsc#1248767).
- CVE-2025-55298: Fixed heap overflow due to format string bug vulnerability (bsc#1248780).
- CVE-2025-57
This update for ImageMagick fixes the following issues:
- CVE-2025-53014: Fixed an off-by-one error may cause an out-of-bounds memory access (bsc#1246530)
- CVE-2025-53019: Fixed format specifiers in a filename template may cause a memory leak (bsc#1246534)
This update for ImageMagick fixes the following issues:
- CVE-2025-43965: mishandling of image depth after SetQuantumFormat is used in MIFF image processing. (bsc#1241659)