Threats Tagged 'cve-2026-66011'

This security update for ImageMagick addresses multiple vulnerabilities including memory leaks, heap buffer overwrites, integer overflow, heap buffer overread, and code injection. The issues affect various components such as the PNG encoder, morphology operation, fx operation, JNX decoder, magick CLI, BGR decoder, and HTML encoder. These vulnerabilities could lead to memory corruption or code injection if exploited. The update fixes these issues to improve security and stability.

Multiple security issues were fixed in the ImageMagick-7.1.2.28-1.1 package distributed with openSUSE Tumbleweed. These vulnerabilities affect the ImageMagick software as packaged by SUSE. No specific details on the nature of the vulnerabilities or affected versions are provided.

ImageMagick versions prior to 7.1.2-27 have a memory leak vulnerability in the magick command-line interface triggered by invalid options. This flaw allows attackers to cause memory exhaustion by repeatedly supplying malformed command-line arguments, potentially impacting system availability. The vulnerability has a moderate severity rating with a CVSS score of 3.3. No known exploits are reported in the wild. A fix is available in version 7.1.2-27.