CVE-2026-28687

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41

Description ImageMagick is software for editing and manipulating digital images. A heap use-after-free issue exists in ImageMagick’s MSL decoder. By crafting a malicious MSL file, an attacker can trigger access to freed memory.

Recommendations Update ImageMagick to version 7.1.2-16 or later. Update ImageMagick to version 6.9.13-41 or later.