8.1Alta
CVE-2026-116149ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images
Descripción
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to overwrite stack memory during decoding, causing crashes or memory corruption.
Debilidad (CWE):
CWE-121
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| ImageMagick | ImageMagick | 7.0.0-0 – < 7.1.2-33, fixed 7.1.2-33 |
Referencias y parches
- GitHub Security Advisory (GHSA-pwpf-8799-94cj) vendor-advisoryVendor Advisory
- VulnCheck Advisory: ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images third-party-advisoryThird Party Advisory
Coincidencias CPE (NVD) (2)
cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*< 6.9.13-58cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*≥ 7.0.0-0 < 7.1.2-33