https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T08:53:53.407260+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-86420 fkie_cve-2026-86420 2026-10-02T08:53:53.432306+00:00

ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service.

 https://vulnerability.circl.lu/vuln/ghsa-7xg2-fjfx-cprr GHSA-7xg2-fjfx-cprr 2026-10-02T08:53:53.432438+00:00

ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service.

 https://vulnerability.circl.lu/vuln/oesa-2026-3851 OESA-2026-3851 — ImageMagick security update 2026-10-02T08:53:53.432475+00:00

Affected: openEuler:24.03-LTS-SP1: ImageMagick, openEuler:24.03-LTS-SP3: ImageMagick, openEuler:24.03-LTS-SP4: ImageMagick, openEuler:20.03-LTS-SP4: ImageMagick, openEuler:22.03-LTS-SP4: ImageMagick

Use ImageMagick to create, edit, compose, or convert bitmap images. It can read and write images in a variety of formats (over 200) including PNG, JPEG, GIF, HEIC, TIFF, DPX, EXR, WebP, Postscript, PDF, and SVG. Use ImageMagick to resize, flip, mirror, rotate, distort, shear and transform images, adjust image colors, apply various special effects, or draw text, lines, polygons, ellipses and Bézier curves. Security Fix(es):

ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service.(CVE-2026-86420)

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory allocation without proper deallocation, allowing an attacker to exhaust memory and cause a denial of service.(CVE-2026-86421)

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the GetList method can trigger the use-after-free, resulting in a crash (denial of service).(CVE-2026-86423)

ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vulnerability in the video decoder that allows attackers to bypass path policy write restrictions via symlink swaps. An attacker can replace a symlink between policy validation (check-time) and the file…

 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11801-1 openSUSE-SU-2026:11801-1 — ImageMagick-7.1.2.31-1.1 on GA media 2026-10-02T08:53:53.432572+00:00

ImageMagick-7.1.2.31-1.1 on GA media

 https://vulnerability.circl.lu/vuln/suse-su-2026:23901-1 SUSE-SU-2026:23901-1 — Security update for ImageMagick 2026-10-02T08:53:53.432610+00:00

Security update for ImageMagick

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-86420 UBUNTU-CVE-2026-86420 2026-10-02T08:53:53.432638+00:00

Affected: Ubuntu:Pro:14.04:LTS: imagemagick, Ubuntu:Pro:16.04:LTS: imagemagick, Ubuntu:Pro:18.04:LTS: imagemagick, Ubuntu:Pro:20.04:LTS: imagemagick, Ubuntu:Pro:22.04:LTS: imagemagick, Ubuntu:Pro:24.04:LTS: imagemagick, Ubuntu:Pro:26.04:LTS: imagemagick

ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service.