CVE-2026-123273Medium· 6.5▾ SunlitImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because QueueAuthenticPixelCacheNexus in MagickCore/cache.c fails to validate requested region width and height. Attackers can supply a crafted SVG image that repeatedly requests a non-advancing pixel region, consuming CPU and hanging the decoding worker.
ImageMagick >= 7.0.0 < 7.1.2-35ImageMagick < 6.9.13-60Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-106568Medium· 5.3ImageMagick is free and open-source software used for editing and manipulating digital images
CVE-2026-106567Medium· 5.9ImageMagick is free and open-source software used for editing and manipulating digital images
CVE-2026-106565Medium· 5.9ImageMagick is free and open-source software used for editing and manipulating digital images
CVE-2026-61872Low· 2.5ImageMagick before 7.1.2-26 Memory Leak via TIFF Encoder
CVE-2026-61871Low· 3.7ImageMagick before 7.1.2-26 Memory Leak in ICON decoder
CVE-2026-61869Low· 2.9ImageMagick before 7.1.2-26 Memory Leak in MIFF Encoder