ImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory Corruption
概要
ImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory Corruption
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a signed integer overflow vulnerability in ImageMagick's SIXEL decoder allows an attacker to trigger memory corruption and denial of service when processing a maliciously crafted SIXEL image file. The vulnerability occurs during buffer reallocation operations where pointer arithmetic using signed 32-bit integers overflows. Versions 7.1.2-15 and 6.9.13-40 contain a patch.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2026-25970 imagemagick 修正版: 8:6.9.11.60+dfsg-1.3+deb11u10
- Ubuntu UBUNTU-CVE-2026-25970 imagemagick 修正版: 8:6.8.9.9-7ubuntu5.16+esm19
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov