ImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory Corruption
Résumé
ImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory Corruption
Description d'origine
La description telle que publiée par la source (souvent en anglais).
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a signed integer overflow vulnerability in ImageMagick's SIXEL decoder allows an attacker to trigger memory corruption and denial of service when processing a maliciously crafted SIXEL image file. The vulnerability occurs during buffer reallocation operations where pointer arithmetic using signed 32-bit integers overflows. Versions 7.1.2-15 and 6.9.13-40 contain a patch.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2026-25970 imagemagick Corrigé dans: 8:6.9.11.60+dfsg-1.3+deb11u10
- Ubuntu UBUNTU-CVE-2026-25970 imagemagick Corrigé dans: 8:6.8.9.9-7ubuntu5.16+esm19
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov