PT-2026-32538

CVE-2026-40169

·

Published

2026-04-09

·

Updated

2026-07-30

Description by

CVSS 3.1
6.2
Medium
MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-19
Description A crafted image could result in an out of bounds heap write (a memory corruption error where data is written outside the boundaries of an allocated heap memory block) when writing a yaml or json output, resulting in a crash.
Recommendations Update to version 7.1.2-19. As a temporary workaround, consider restricting the use of yaml or json output until the software is updated.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-5592-P365-24XH
JLSEC-2026-1000
OESA-2026-1916
OESA-2026-1917
OESA-2026-1918
OESA-2026-1919
OESA-2026-1921
OPENSUSE-SU-2026:10586-1
OPENSUSE-SU-2026:20606-1
OPENSUSE-SU-2026:21071-1
SUSE-SU-2026:1597-1
SUSE-SU-2026:1598-1
SUSE-SU-2026:21380-1
SUSE-SU-2026:22378-1
SUSE-SU-2026:2580-1
SUSE-SU-2026:2877-1
SUSE-SU-2026:3023-1
Found an issue in the description? Have something to add? Feel free to write us 👾