Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Bennyisaacs

#27250of 56,333
9.8Total CVSS
Vulnerabilities · 1
PT-2026-3528
9.8
2026-01-18
Unknown · Imagemagick · CVE-2026-23876
**Name of the Vulnerable Software and Affected Versions** ImageMagick versions prior to 7.1.2-13 and 6.9.13-38 **Description** ImageMagick is a free and open-source software used for editing and manipulating digital images. A heap buffer overflow vulnerability exists in the XBM image decoder (`ReadXBMImage`) when processing maliciously crafted image files. This allows an attacker to write data beyond the allocated memory buffer, potentially leading to remote code execution. The issue is triggered when reading or identifying an image, making it exploitable through common image upload and processing pipelines. **Recommendations** Update ImageMagick to version 7.1.2-13 or 6.9.13-38 or later to address this vulnerability.