CVE-2026-42326
5.1
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Exploitability: 2.5 / Impact: 2.5
Source: security-advisories@github.com (Secondary)
Description
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a malicious input file could cause an out of bounds read of a single byte. This issue has been patched in versions 6.9.13-47 and 7.1.2-22.
Affected (2)
Products: Imagemagick: Imagemagick
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 6.9.13-47 |
Related CWEs
CWE-125
Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
CWE-191
Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
References (1)
Source: security-advisories@github.com
Vendor Advisory
Timeline
No history available yet.