CVE-2026-27799

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-15 ImageMagick versions prior to 6.9.13-40

Description ImageMagick is software used for editing and manipulating digital images. A heap buffer over-read issue exists in the DJVU image format handler. This happens because of integer truncation when calculating the stride (row size) for pixel buffer allocation. The stride calculation overflows a 32-bit signed integer, leading to out-of-bounds memory reads.

Recommendations Update ImageMagick to version 7.1.2-15 or later. Update ImageMagick to version 6.9.13-40 or later.