Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-105823 →
DEBIAN-CVE-2026-105823
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be byp...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 lacks a security policy check in the CUT encoder, allowing configured security policies to be bypassed. Attackers can supply crafted input processed by the CUT encoder to crash the application or leak sensitive data.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:7.1.2.31+dfsg1-1"}]}]
Références
- advisory security-tracker.debian.org