PT-2026-32544

CVE-2026-40312

Published

2026-04-13

Updated

2026-09-24

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-19

Description An off-by-one error in the MSL decoder can cause a crash when reading a malicious MSL file.

Recommendations Update to version 7.1.2-19.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-5XG3-585R-9JH5

ECHO-1D9E-4CD3-3B9E

JLSEC-2026-1004

OESA-2026-1916

OESA-2026-1917

OESA-2026-1918

OESA-2026-1919

OESA-2026-1921

OPENSUSE-SU-2026:10586-1

OPENSUSE-SU-2026:20606-1

SUSE-SU-2026:1597-1

SUSE-SU-2026:1598-1

SUSE-SU-2026:21380-1

USN-8810-1

Found an issue in the description? Have something to add? Feel free to write us 👾