8.1Hoch
CVE-2026-116149ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images
Beschreibung
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption.
Schwachstellentyp (CWE):
CWE-121
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| ImageMagick | ImageMagick | 7.0.0-0 – < 7.1.2-33, fixed 7.1.2-33 |
Referenzen und Patches
- GitHub Security Advisory (GHSA-pwpf-8799-94cj) vendor-advisoryVendor Advisory
- VulnCheck Advisory: ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images third-party-advisoryThird Party Advisory
CPE-Treffer (NVD) (2)
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*< 6.9.13-58cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*≥ 7.0.0-0 < 7.1.2-33