PT-2026-25070 · Unknown+1 · Imagemagick+1
Mcsky23
·
Publicado
2026-01-01
·
Atualizado
2026-06-17
·
CVE-2026-32259
CVSS v3.1
6.7
Média
| Vetor | AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 7.1.2-16
ImageMagick versions prior to 6.9.13-41
Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Before versions 7.1.2-16 and 6.9.13-41, a failure in memory allocation within the sixel encoder could lead to writing beyond the bounds of a stack-allocated buffer. The sixel encoder is a component responsible for handling a specific image format.
Recommendations
ImageMagick versions prior to 7.1.2-16 should be updated to version 7.1.2-16 or later.
ImageMagick versions prior to 6.9.13-41 should be updated to version 6.9.13-41 or later.
Exploit
Correção
DoS
Stack Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Imagemagick
Red Os