Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-93590 →
DEBIAN-CVE-2026-93590
ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation fo...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image pixels. Attackers can bypass resource policies by processing specially crafted UHDR images, potentially causing denial of service through excessive memory allocation.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:13
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]
Debian:14
imagemagick
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8:7.1.2.31+dfsg1-1"}]}]
Références
- advisory security-tracker.debian.org