CVE-2026-28494

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-16 ImageMagick versions prior to 6.9.13-41

Description ImageMagick is software used for editing and manipulating digital images. A stack buffer overflow exists in the morphology kernel parsing functions. User-controlled kernel strings exceeding a buffer are copied into fixed-size stack buffers via memcpy without bounds checking, resulting in stack corruption.

Recommendations Update ImageMagick to version 7.1.2-16 or later. Update ImageMagick to version 6.9.13-41 or later.