MGASA-2026-0414: imagemagick Mageia
Vulnerability summary
MGASA-2026-0414 is a vulnerability in imagemagick Mageia with no CVSS score yet.
Advisory lineage
Upstream 5 · Downstream 0Timeline
- 17-09-2026PublishedVulnerability first disclosed.
- 17-09-2026Last modifiedVulnerability information updated.
Description
Updated imagemagick package fixes security vulnerabilities Heap-use-after-free in Layer method of PerlMagick could result in a crash Path Policy TOCTOU symlink race bypass in the video decoder Heap-use-after-free in the GetList method of PerlMagick could result in a crash Memory Leak in MSL decoder Denial of service when exhausting the process memory budget Policy Bypass in UHDR encoder Division by Zero in FLIF encoder Null Pointer Dereference in PNM coder when hitting a memory limit Policy Bypass in PCD, CUBE and HALD decoder when using a specific command line option. Use after free in ImagesToBlob method
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mageia1 product
- imagemagick< 7.1.2.31-1.mga10 | < 7.1.2.31-1.mga10.tainted
1 vendor · 1 product