PT-2026-21649 · Unknown+3 · Imagemagick+3

·

CVE-2026-26284

·

Published

2026-02-24

·

Updated

2026-07-30

CVSS v2.0

9.4

Critical

VectorAV:N/AC:L/Au:N/C:C/I:N/A:C
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40
Description ImageMagick, software for editing and manipulating digital images, has an issue with boundary checking when processing Huffman-coded data from PCD (Photo CD) files. The decoder contains a function with an incorrect initialization, potentially leading to an out-of-bounds read.
Recommendations Update ImageMagick to version 7.1.2-15 or later. Update ImageMagick to version 6.9.13-40 or later.

Exploit

Fix

DoS

Heap Based Buffer Overflow

Out of bounds Read

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-09373
CVE-2026-26284
ECHO-3501-824A-8370
GHSA-WRHR-RF8J-R842
JLSEC-2026-968
OESA-2026-1452
OESA-2026-1453
OESA-2026-1454
OESA-2026-1455
OESA-2026-1456
OESA-2026-1457
OPENSUSE-SU-2026:10267-1
OPENSUSE-SU-2026:10558-1
OPENSUSE-SU-2026:20337-1
OPENSUSE-SU-2026:20536-1
SUSE-SU-2026:0851-1
SUSE-SU-2026:0852-1
SUSE-SU-2026:0853-1
SUSE-SU-2026:0854-1
SUSE-SU-2026:1300-1
USN-8069-1

Affected Products

Imagemagick
Linuxmint
Red Os
Ubuntu