- CVE-2026-86425: split a copy of the image list at the first NULL: image in the PerlMagick Layers method to prevent a heap use-after-free - CVE-2026-86423: clone every image that appears more than once in a PerlMagick image list, not only adjacent repeats, so the same image is never linked into a list twice - CVE-2026-86424: open the delegate output file without following symbolic links and check the write policy again after opening it, to prevent a symlink race from bypassing the path policy - CVE-2026-34238: check the despeckle buffer size for integer overflow to prevent a heap buffer overflow on 32-bit systems