JLSEC-2026-947
- Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-947.md
- Import Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-947.json
- JSON Data
- https://api.osv.dev/v1/vulns/JLSEC-2026-947
- Upstream
- Published
- 2026-07-30T16:02:27.435Z
- Modified
- 2026-07-30T18:35:32.549259099Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
- Summary
- ImageMagick: Code Injection via PostScript header in ps coders
- Details
-
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the ps coders, responsible for writing PostScript files, fails to sanitize the input before writing it into the PostScript header. An attacker can provide a malicous file and inject arbitrary PostScript code. When the resulting file is processed by a printer or a viewer (like Ghostscript), the injected code is interpreted and executed. The html encoder does not properly escape strings that are written to in the html document. An attacker can provide a malicious file and injection arbitrary html code. Versions 7.1.2-15 and 6.9.13-40 contain a patch.
- Database specific
{ "license": "CC-BY-4.0", "sources": [ { "modified": "2026-06-17T10:25:15.707Z", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-25797", "published": "2026-02-24T01:16:14.450Z", "id": "CVE-2026-25797", "imported": "2026-07-30T14:08:44.992Z", "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25797", "database_specific": { "status": "Analyzed" } }, { "modified": "2026-02-24T15:34:27Z", "url": "https://api.github.com/advisories/GHSA-rw6c-xp26-225v", "published": "2026-02-24T15:34:26Z", "id": "GHSA-rw6c-xp26-225v", "imported": "2026-07-30T14:09:20.350Z", "html_url": "https://github.com/advisories/GHSA-rw6c-xp26-225v" }, { "html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-7445", "url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2026-7445", "published": "2026-02-24T01:01:22Z", "id": "EUVD-2026-7445", "imported": "2026-07-30T14:08:55.259Z", "modified": "2026-02-26T15:13:42Z" } ] }- References
-
- https://github.com/ImageMagick/ImageMagick/commit/26088a83d71e9daa203d54a56fe3c31f3f85463d
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rw6c-xp26-225v
- https://github.com/advisories/GHSA-rw6c-xp26-225v
- https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3
- https://nvd.nist.gov/vuln/detail/CVE-2026-25797