{"id":"CLSA-2026-1783415795","summary":"ImageMagick: Fix of 12 CVEs","details":"- CVE-2026-33901: fix heap buffer overflow (out-of-bounds write) in the MVG\n  decoder when copying an over-long token into a fixed-size buffer\n- CVE-2026-33908: fix stack exhaustion denial of service in DestroyXMLTree()\n  by imposing a recursion depth limit on deeply nested XML\n- CVE-2026-45031: fix list-length resource policy bypass in the PSD decoder\n  by validating the layer count against the list limit\n- CVE-2026-45664: fix excessive resource use in the MNG coder by bounding the\n  number of LOOP/ENDL operations\n- CVE-2026-46520: fix heap out-of-bounds write in the IPL coder when writing\n  multiple images with differing dimensions\n- CVE-2026-46522: fix infinite loop (CPU exhaustion) in the MIFF decoder on a\n  crafted file\n- CVE-2026-46523: fix heap use-after-free in the MSL coder by disabling blob\n  support for the MSL format","modified":"2026-10-26T09:31:58.126961320Z","published":"2026-07-07T09:17:09Z","upstream":["CVE-2026-33901","CVE-2026-33908","CVE-2026-45031","CVE-2026-45664","CVE-2026-46520","CVE-2026-46522","CVE-2026-46523"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1783415795.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33901"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33908"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42326"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45031"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45624"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45664"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46520"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46521"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46522"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46523"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48734"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-48994"}],"affected":[{"package":{"name":"ImageMagick","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/ImageMagick?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.0.3.el7_9.tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1783415795.json"}},{"package":{"name":"ImageMagick-c++","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/ImageMagick-c++?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.0.3.el7_9.tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1783415795.json"}},{"package":{"name":"ImageMagick-c++-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/ImageMagick-c++-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.0.3.el7_9.tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1783415795.json"}},{"package":{"name":"ImageMagick-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/ImageMagick-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.0.3.el7_9.tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1783415795.json"}},{"package":{"name":"ImageMagick-doc","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/ImageMagick-doc?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.0.3.el7_9.tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1783415795.json"}},{"package":{"name":"ImageMagick-perl","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/ImageMagick-perl?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.10.68-7.0.3.el7_9.tuxcare.els19"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1783415795.json"}}],"schema_version":"1.9.0"}