JLSEC-2026-971
- Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-971.md
- Import Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-971.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/JLSEC-2026-971
- Upstream
- Published
- 2026-07-30T16:02:27Z
- Modified
- 2026-07-30T18:31:15Z
- Severity
-
- 4.4 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L (Source: NVD) CVSS Calculator
- Summary
- ImageMagick has a heap Buffer Over-read in its DJVU image format handler
- Details
-
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a heap buffer over-read vulnerability exists in the DJVU image format handler. The vulnerability occurs due to integer truncation when calculating the stride (row size) for pixel buffer allocation. The stride calculation overflows a 32-bit signed integer, resulting in an out-of-bounds memory reads. Versions 7.1.2-15 and 6.9.13-40 contain a patch.
- Database specific
{ "license": "CC-BY-4.0", "sources": [ { "database_specific": { "status": "Analyzed" }, "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27799", "id": "CVE-2026-27799", "imported": "2026-07-30T14:08:45.820Z", "modified": "2026-06-17T10:27:42.203Z", "published": "2026-02-26T00:16:25.393Z", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-27799" }, { "html_url": "https://github.com/advisories/GHSA-r99p-5442-q2x2", "id": "GHSA-r99p-5442-q2x2", "imported": "2026-07-30T14:09:23.207Z", "modified": "2026-02-27T22:17:07Z", "published": "2026-02-25T19:24:24Z", "url": "https://api.github.com/advisories/GHSA-r99p-5442-q2x2" }, { "html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-8772", "id": "EUVD-2026-8772", "imported": "2026-07-30T14:08:55.036Z", "modified": "2026-02-26T17:04:08Z", "published": "2026-02-25T23:20:25Z", "url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2026-8772" } ] }- References
-
- https://github.com/ImageMagick/ImageMagick/commit/e87695b3227978ad70b967b8d054baaf8ac2cced
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r99p-5442-q2x2
- https://github.com/advisories/GHSA-r99p-5442-q2x2
- https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3
- https://nvd.nist.gov/vuln/detail/CVE-2026-27799