PT-2026-21647

CVE-2026-26066

·

Published

2026-02-23

·

Updated

2026-10-09

Description by

CVSS 3.1
8.6
High
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40
Description ImageMagick is software used for editing and manipulating digital images. A specially crafted profile containing invalid IPTC data can cause an infinite loop when writing it using the IPTCTEXT function.
Recommendations Update to ImageMagick version 7.1.2-15 or later. Update to ImageMagick version 6.9.13-40 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-V994-63CG-9WJ3
CLSA-2026-1777046565
CLSA-2026-1790182513
ECHO-3601-998E-3D53
JLSEC-2026-966
OESA-2026-1452
OESA-2026-1453
OESA-2026-1454
OESA-2026-1455
OESA-2026-1456
OESA-2026-1457
OPENSUSE-SU-2026:10267-1
OPENSUSE-SU-2026:20337-1
SUSE-SU-2026:0851-1
SUSE-SU-2026:0852-1
SUSE-SU-2026:0853-1
SUSE-SU-2026:0854-1
USN-8127-1
Found an issue in the description? Have something to add? Feel free to write us 👾