PT-2026-122990

CVE-2026-116149

Published

2026-10-25

Updated

2026-11-10

Description by

CVSS 3.1

8.1

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 6.9.13-58 ImageMagick versions prior to 7.1.2-33

Description A stack-based buffer overflow exists when handling bzip2 compressed images. An attacker can provide a specially crafted image using bzip2 compression to overwrite stack memory during the decoding process, which may lead to memory corruption or system crashes.

Recommendations Update to version 6.9.13-58. Update to version 7.1.2-33 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Davidkorczynski

Vendors

Affected products

Weakness enumeration

CWE-121: Stack-based Buffer Overflow

Related identifiers