CVE-2026-108693

ImageMagick: Mehrere Schwachstellen

Debian Linux, Amazon Linux 2, Gentoo Linux, SUSE Linux, SUSE openSUSE, Open Source ImageMagick

ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghostscript is unregistered. Attackers can plant a malicious gswin64c.exe in the working directory to execute code with ImageMagick privileges when PDF, PostScript, or EPS files are converted.

11. Okt 2026

Ausgewertete Quellen

• Hinweis
  https://www.vulncheck.com/advisories/imagemagick-through-7.1.2-33-and-6.9.13-58-uncontrolled-search-path-via-ghostscript-delegate
• CERT-Bund
  WID-SEC-2026-3867
• NVD
  CVE-2026-108693
• GitHub
  https://github.com/ghostx-86/exploitarium/tree/main/imagemagick-gs-delegate-hijack-poc