NIXPKGS-2026-0471

GitHub issue published 6 months, 3 weeks ago

Permalink CVE-2026-25799

5.3 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): Low (L)

updated 6 months, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 6 months, 3 weeks ago
• @LeSuisse ignored
  3 packages

  • tests.pkg-config.defaultPkgConfigPackages.ImageMagick
  • tests.pkg-config.defaultPkgConfigPackages.MagickWand
  • graphicsmagick-imagemagick-compat
  6 months, 3 weeks ago
• @LeSuisse deleted
  3 maintainers

  • @dotlambda
  • @rhendric
  • @faukah
  6 months, 3 weeks ago maintainer.delete
• @LeSuisse accepted 6 months, 3 weeks ago
• @LeSuisse published on GitHub 6 months, 3 weeks ago

ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-543g-8grm-9cw6 x_refsource_CONFIRM

---

ImageMagick

• ==>= 7.0.0, < 7.1.2-15
• ==< 6.9.13-40

NIXPKGS-2026-0472

GitHub issue published 6 months, 3 weeks ago

Permalink CVE-2026-26066

6.2 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 6 months, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 6 months, 3 weeks ago
• @LeSuisse ignored
  3 packages

  • tests.pkg-config.defaultPkgConfigPackages.ImageMagick
  • tests.pkg-config.defaultPkgConfigPackages.MagickWand
  • graphicsmagick-imagemagick-compat
  6 months, 3 weeks ago
• @LeSuisse deleted
  3 maintainers

  • @faukah
  • @rhendric
  • @dotlambda
  6 months, 3 weeks ago maintainer.delete
• @LeSuisse accepted 6 months, 3 weeks ago
• @LeSuisse published on GitHub 6 months, 3 weeks ago

ImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v994-63cg-9wj3 x_refsource_CONFIRM

---

ImageMagick

• ==>= 7.0.0, < 7.1.2-15
• ==< 6.9.13-40

NIXPKGS-2026-0473

GitHub issue published 6 months, 3 weeks ago

Permalink CVE-2026-25797

5.7 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Changed (C)
• Confidentiality (C): None (N)
• Integrity (I): Low (L)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Changed (C)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): Low (L)

updated 6 months, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 6 months, 3 weeks ago
• @LeSuisse ignored
  3 packages

  • tests.pkg-config.defaultPkgConfigPackages.ImageMagick
  • tests.pkg-config.defaultPkgConfigPackages.MagickWand
  • graphicsmagick-imagemagick-compat
  6 months, 3 weeks ago
• @LeSuisse deleted
  3 maintainers

  • @faukah
  • @rhendric
  • @dotlambda
  6 months, 3 weeks ago maintainer.delete
• @LeSuisse accepted 6 months, 3 weeks ago
• @LeSuisse published on GitHub 6 months, 3 weeks ago

ImageMagick vulnerable to Code injection via PostScript header in ps coders

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rw6c-xp26-225v x_refsource_CONFIRM

---

ImageMagick

• ==>= 7.0.0, < 7.1.2-15
• ==< 6.9.13-40

NIXPKGS-2026-0474

GitHub issue published 6 months, 3 weeks ago

Permalink CVE-2026-25971

6.2 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): High (H)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): High (H)

updated 6 months, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 6 months, 3 weeks ago
• @LeSuisse ignored
  3 packages

  • tests.pkg-config.defaultPkgConfigPackages.ImageMagick
  • tests.pkg-config.defaultPkgConfigPackages.MagickWand
  • graphicsmagick-imagemagick-compat
  6 months, 3 weeks ago
• @LeSuisse deleted
  3 maintainers

  • @faukah
  • @rhendric
  • @dotlambda
  6 months, 3 weeks ago maintainer.delete
• @LeSuisse accepted 6 months, 3 weeks ago
• @LeSuisse published on GitHub 6 months, 3 weeks ago

ImageMagick's MSL: Stack overflow in ProcessMSLScript

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8mpr-6xr2-chhc x_refsource_CONFIRM

---

ImageMagick

• ==>= 7.0.0, < 7.1.2-15
• ==< 6.9.13-40

NIXPKGS-2026-0475

GitHub issue published 6 months, 3 weeks ago

Permalink CVE-2026-25576

5.1 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): None (N)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): None (N)

updated 6 months, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 6 months, 3 weeks ago
• @LeSuisse ignored
  3 packages

  • tests.pkg-config.defaultPkgConfigPackages.ImageMagick
  • tests.pkg-config.defaultPkgConfigPackages.MagickWand
  • graphicsmagick-imagemagick-compat
  6 months, 3 weeks ago
• @LeSuisse deleted
  3 maintainers

  • @faukah
  • @rhendric
  • @dotlambda
  6 months, 3 weeks ago maintainer.delete
• @LeSuisse accepted 6 months, 3 weeks ago
• @LeSuisse published on GitHub 6 months, 3 weeks ago

ImageMagick: Out of bounds read in multiple coders read raw pixel data

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jv4p-gjwq-9r2j x_refsource_CONFIRM
• https://github.com/ImageMagick/ImageMagick/commit/077b42643212d7da8c1a4f6b2cd0067ebca8ec0f x_refsource_MISC
• https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3 x_refsource_MISC

---

ImageMagick

• ==>= 7.0.0, < 7.1.2-15
• ==< 6.9.13-40

NIXPKGS-2026-0476

GitHub issue published 6 months, 3 weeks ago

Permalink CVE-2026-25986

5.3 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): Low (L)

updated 6 months, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 6 months, 3 weeks ago
• @LeSuisse ignored
  3 packages

  • tests.pkg-config.defaultPkgConfigPackages.ImageMagick
  • tests.pkg-config.defaultPkgConfigPackages.MagickWand
  • graphicsmagick-imagemagick-compat
  6 months, 3 weeks ago
• @LeSuisse deleted
  3 maintainers

  • @faukah
  • @rhendric
  • @dotlambda
  6 months, 3 weeks ago maintainer.delete
• @LeSuisse accepted 6 months, 3 weeks ago
• @LeSuisse published on GitHub 6 months, 3 weeks ago

ImageMagick has a heap buffer overflow in YUV 4:2:2 decoder

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqfc-82jx-3mr2 x_refsource_CONFIRM

---

ImageMagick

• ==>= 7.0.0, < 7.1.2-15
• ==< 6.9.13-40

NIXPKGS-2026-0477

GitHub issue published 6 months, 3 weeks ago

Permalink CVE-2026-27799

4.0 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): High (H)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): Low (L)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): High (H)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): Low (L)
• Modified Availability (MA): Low (L)

updated 6 months, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 6 months, 3 weeks ago
• @LeSuisse ignored
  3 packages

  • tests.pkg-config.defaultPkgConfigPackages.ImageMagick
  • tests.pkg-config.defaultPkgConfigPackages.MagickWand
  • graphicsmagick-imagemagick-compat
  6 months, 3 weeks ago
• @LeSuisse deleted
  3 maintainers

  • @faukah
  • @dotlambda
  • @rhendric
  6 months, 3 weeks ago maintainer.delete
• @LeSuisse accepted 6 months, 3 weeks ago
• @LeSuisse published on GitHub 6 months, 3 weeks ago

ImageMagick has a heap Buffer Over-read in its DJVU image format handler

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r99p-5442-q2x2 x_refsource_CONFIRM
• https://github.com/ImageMagick/ImageMagick/commit/e87695b3227978ad70b967b8d054baaf8ac2cced x_refsource_MISC
• https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3 x_refsource_MISC

---

ImageMagick

• ==>= 7.0.0, < 7.1.2-15
• ==< 6.9.13-40

NIXPKGS-2026-0478

GitHub issue published 6 months, 3 weeks ago

Permalink CVE-2026-27798

4.0 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Local (L)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): Low (L)
• Integrity (I): None (N)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Local (L)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): Low (L)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): None (N)

updated 6 months, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 6 months, 3 weeks ago
• @LeSuisse ignored
  3 packages

  • graphicsmagick-imagemagick-compat
  • tests.pkg-config.defaultPkgConfigPackages.MagickWand
  • tests.pkg-config.defaultPkgConfigPackages.ImageMagick
  6 months, 3 weeks ago
• @LeSuisse deleted
  3 maintainers

  • @faukah
  • @rhendric
  • @dotlambda
  6 months, 3 weeks ago maintainer.delete
• @LeSuisse accepted 6 months, 3 weeks ago
• @LeSuisse published on GitHub 6 months, 3 weeks ago

ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qpgx-jfcq-r59f x_refsource_CONFIRM
• https://github.com/ImageMagick/ImageMagick/commit/0377e60b3c0d766bd7271221c95d9ee54f6a3738 x_refsource_MISC
• https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3 x_refsource_MISC

---

ImageMagick

• ==>= 7.0.0, < 7.1.2-15
• ==< 6.9.13-40

NIXPKGS-2026-0479

GitHub issue published 6 months, 3 weeks ago

Permalink CVE-2026-24481

7.5 HIGH

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): High (H)
• Integrity (I): None (N)
• Availability (A): None (N)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): High (H)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): None (N)

updated 6 months, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 6 months, 3 weeks ago
• @LeSuisse deleted
  3 maintainers

  • @faukah
  • @rhendric
  • @dotlambda
  6 months, 3 weeks ago maintainer.delete
• @LeSuisse ignored
  3 packages

  • tests.pkg-config.defaultPkgConfigPackages.MagickWand
  • graphicsmagick-imagemagick-compat
  • tests.pkg-config.defaultPkgConfigPackages.ImageMagick
  6 months, 3 weeks ago
• @LeSuisse accepted 6 months, 3 weeks ago
• @LeSuisse published on GitHub 6 months, 3 weeks ago

ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-96pc-27rx-pr36 x_refsource_CONFIRM

---

ImageMagick

• ==>= 7.0.0, < 7.1.2-15
• ==< 6.9.13-40

NIXPKGS-2026-0480

GitHub issue published 6 months, 3 weeks ago

Permalink CVE-2026-25638

5.3 MEDIUM

• CVSS version (CVSS): 3.1
• Attack Vector (AV): Network (N)
• Attack Complexity (AC): Low (L)
• Privileges Required (PR): None (N)
• User Interaction (UI): None (N)
• Scope (S): Unchanged (U)
• Confidentiality (C): None (N)
• Integrity (I): None (N)
• Availability (A): Low (L)
• Modified Attack Vector (MAV): Network (N)
• Modified Attack Complexity (MAC): Low (L)
• Modified Privileges Required (MPR): None (N)
• Modified User Interaction (MUI): None (N)
• Modified Confidentiality (MC): None (N)
• Modified Scope (MS): Unchanged (U)
• Modified Integrity (MI): None (N)
• Modified Availability (MA): Low (L)

updated 6 months, 3 weeks ago by @LeSuisse Activity log

• Created suggestion 6 months, 3 weeks ago
• @LeSuisse deleted
  3 maintainers

  • @faukah
  • @dotlambda
  • @rhendric
  6 months, 3 weeks ago maintainer.delete
• @LeSuisse ignored
  3 packages

  • tests.pkg-config.defaultPkgConfigPackages.ImageMagick
  • tests.pkg-config.defaultPkgConfigPackages.MagickWand
  • graphicsmagick-imagemagick-compat
  6 months, 3 weeks ago
• @LeSuisse accepted 6 months, 3 weeks ago
• @LeSuisse published on GitHub 6 months, 3 weeks ago

ImageMagick has memory leak in msl encoder

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gxcx-qjqp-8vjw x_refsource_CONFIRM

---

ImageMagick

• ==>= 7.0.0, < 7.1.2-15
• ==< 6.9.13-40