PT-2026-32538
CVE-2026-40169
·
Published
2026-04-09
·
Updated
2026-07-30
Description by
CVSS 3.1
6.2
MediumMetricsAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
ImageMagick versions prior to 7.1.2-19
Description
A crafted image could result in an out of bounds heap write (a memory corruption error where data is written outside the boundaries of an allocated heap memory block) when writing a yaml or json output, resulting in a crash.
Recommendations
Update to version 7.1.2-19.
As a temporary workaround, consider restricting the use of yaml or json output until the software is updated.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾