[Git][security-tracker-team/security-tracker][master] CVE-2026-48733

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fc9a8e2a by Bastien Roucariès at 2026-06-12T22:58:30+02:00
CVE-2026-48733

Bad initialisation of memory introduced later

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -706,9 +706,11 @@ CVE-2026-48734 (ImageMagick is free and open-source software used for editing an
 	NOTE: Fixed by: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/60153856299c66689e3620b8347c0cc32c807d95 (6.9.13-49)
 CVE-2026-48733 (ImageMagick is free and open-source software used for editing and mani ...)
 	- imagemagick 8:7.1.2.24+dfsg1-1
+	[trixie] - imagemagick <not-affected> (vulnerable code introduced later)
 	NOTE: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5v62-8fq6-cp9m
 	NOTE: Fixed by: https://github.com/ImageMagick/ImageMagick/commit/3a12d63368e88350ed838966fcbb67625938cf3a (7.1.2-24)
 	NOTE: Fixed by: Fixed by: https://github.com/ImageMagick/ImageMagick6/commit/1a59a4f31acca06f90a1f83424ef991a60f76b61 (6.9.13-49)
+	NOTE: Introduced by https://github.com/ImageMagick/ImageMagick/commit/9624484e03bee69e8895e36cf5b4a74e52ef39ef (7.1.1-44)
 CVE-2026-48724 (ImageMagick is free and open-source software used for editing and mani ...)
 	- imagemagick 8:7.1.2.24+dfsg1-1
 	[bookworm] - imagemagick <not-affected> (Vulnerable code not present, introduced in IM7)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc9a8e2ac481cb9a79a4d6278bda0b77fddf09c2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc9a8e2ac481cb9a79a4d6278bda0b77fddf09c2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260612/90f67c0a/attachment.htm>