ImageMagick leaks XMP parameter-entity strings (CVE-2026-116155)
Fixed in ImageMagick 7.1.2-33 and 6.9.13-58; reject XMP profiles in policy.xml as a stopgap.
Stories per day · 30 days
1 stories, newest first · one card per story
Stories tagged #xmp
1 stories, newest first · one card per story
Fixed in ImageMagick 7.1.2-33 and 6.9.13-58; reject XMP profiles in policy.xml as a stopgap.
Today 1.6K readers · 2.9K views · 2K reads · all time 167K views