PT-2026-76235

Published

2026-07-30

·

Updated

2026-07-30

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes per row in the call to AcquireQuantumMemory(). This could cause impact to reliability. This flaw affects ImageMagick versions prior to 7.0.8-68.
Exploitability
Fix
Vendors
Affected products
Related identifiers
JLSEC-2026-842
Found an issue in the description? Have something to add? Feel free to write us 👾