CVE-2026-109964 in ImageMagick
Zusammenfassung
von MITRE • 13.10.2026
ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Attackers can supply a crafted PICT file with maximized row, column and bytes-per-line values to bypass bounds checks and write up to 128 controlled bytes below the heap buffer, causing crashes or code execution.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.