CVE-2026-25986

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40

Description ImageMagick is software used for editing and manipulating digital images. A heap buffer overflow write issue exists in the ReadYUVImage() function (coders/yuv.c) when processing maliciously crafted YUV 4:2:2 (NoInterlace) images. The issue occurs because the pixel-pair loop writes one pixel beyond the allocated row buffer.

Recommendations Update ImageMagick to version 7.1.2-15 or later. Update ImageMagick to version 6.9.13-40 or later.