Threats Tagged 'cve-2026-61464'

A security update for GraphicsMagick addresses CVE-2026-56379, which involves arbitrary MVG drawing command injection via the SVG decoder when processing specially crafted SVG files. This vulnerability could allow an attacker to inject malicious drawing commands during SVG processing.

A security update for GraphicsMagick addresses a heap buffer over-write vulnerability (CVE-2026-61464) triggered by processing a crafted window title during X11 import. This vulnerability has been assigned a low severity rating. No CVSS score is provided. No affected versions are explicitly stated. There are no known exploits in the wild. The update fixes the issue.

This security update for ImageMagick addresses multiple vulnerabilities including memory leaks, arbitrary command injection, heap buffer over-write, policy bypass, use-after-free, and information disclosure. The flaws affect various components such as the ASHLAR coder, SVG decoder, X11 import, script operations, freetype initialization, and multiple image encoders and decoders. These issues could lead to resource exhaustion, unauthorized command execution, memory corruption, bypass of security policies, and leakage of sensitive information. The update fixes these issues to improve the security and stability of ImageMagick.