PT-2026-60152 · Imagemagick · Imagemagick

Bin-Infinite · Publicado 2026-07-15 · Atualizado 2026-07-15 · CVE-2026-61862

Mitre

CVSS v3.1

2.9

Baixa

Vetor base

AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

ImageMagick before 7.1.2-26 and 6.9.13-51 contains an information disclosure vulnerability: when a profile is displayed with the identify command and the profile value is not printable, a single byte at the end of the profile can be printed (read past the profile boundary). This behavior occurs when debug output is enabled.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2026-61862

Produtos afetados

Imagemagick

Referências · 3

• https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hwf3-r46v-5ggx · Aviso do Fabricante
• https://vulncheck.com/advisories/imagemagick-before-26-information-disclosure-via-identify · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-61862 · Nota de Segurança