GHSA-rw29-w85j-wc72MediumCVSS 3.3
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and...
🔗 CVE IDs covered (1)
📋 Description
ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a policy bypass in the PS, PDF and XPS decoders that allows the security policy's list length limit on scene selection to be circumvented. Attackers supplying a specific argument can cause ImageMagick to process more scenes than permitted, potentially exhausting resources.
🔗 References (4)
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fp46-842c-2v83
- https://nvd.nist.gov/vuln/detail/CVE-2026-116143
- https://www.vulncheck.com/advisories/imagemagick-before-6.9.13-58-and-7-x-before-7.1.2-33-policy-bypass-in-ps-pdf-and-xps-decoders
- https://github.com/advisories/GHSA-rw29-w85j-wc72