{"id":"MGASA-2026-0414","summary":"Updated imagemagick package fixes security vulnerabilities","details":"Heap-use-after-free in Layer method of PerlMagick could result in a\ncrash\nPath Policy TOCTOU symlink race bypass in the video decoder\nHeap-use-after-free in the GetList method of PerlMagick could result in\na crash\nMemory Leak in MSL decoder\nDenial of service when exhausting the process memory budget\nPolicy Bypass in UHDR encoder\nDivision by Zero in FLIF encoder\nNull Pointer Dereference in PNM coder when hitting a memory limit\nPolicy Bypass in PCD, CUBE and HALD decoder when using a specific\ncommand line option.\nUse after free in ImagesToBlob method\n","modified":"2026-09-17T14:15:02.574117436Z","published":"2026-09-17T14:10:41Z","upstream":["CVE-2026-86420","CVE-2026-86421","CVE-2026-86423","CVE-2026-86424","CVE-2026-86425"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2026-0414.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=36167"},{"type":"ADVISORY","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-chf5-8rv9-gjqr"},{"type":"ADVISORY","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9x6f-98x9-rx6g"},{"type":"ADVISORY","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5m9j-96ff-j6qc"},{"type":"ADVISORY","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f4x"},{"type":"ADVISORY","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4mwf-mggw-29vp"},{"type":"ADVISORY","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm"},{"type":"ADVISORY","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c"},{"type":"ADVISORY","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-92rw-c5mw-27v4"},{"type":"ADVISORY","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-89wq-f8f6-2j2v"},{"type":"ADVISORY","url":"https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67"}],"affected":[{"package":{"name":"imagemagick","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/imagemagick?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.31-1.mga10"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0414.json"}},{"package":{"name":"imagemagick","ecosystem":"Mageia:10","purl":"pkg:rpm/mageia/imagemagick?arch=source&distro=mageia-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.1.2.31-1.mga10.tainted"}]}],"ecosystem_specific":{"section":"tainted"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2026-0414.json"}}],"schema_version":"1.9.0","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}