Debian/imagemagick: unknown
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted TGA image for proces
Action: Upgrade imagemagick to 8:7.1.1.43+dfsg1-1+deb13u14 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8:7.1.1.43+dfsg1-1+deb13u14 | - |
Fixed versions
| 8:7.1.1.43+dfsg1-1+deb13u14 |
Sources
- osv: DEBIAN-CVE-2026-109259#Debian:13/imagemagick
- https://security-tracker.debian.org/tracker/CVE-2026-109259
published · modified · JSON