PT-2026-42814

CVE-2026-47166

·

Published

2026-05-21

·

Updated

2026-10-09

Description by

CVSS 3.1
5.7
Medium
MetricsAV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions ImageMagick (affected versions not specified)
Description An attacker capable of connecting to a magick -distribute-cache service can trigger a heap buffer over-read in the server process. A heap buffer over-read occurs when a program reads data past the end of the intended buffer on the heap, potentially leading to information disclosure or application crashes.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
GHSA-6GXQ-F64P-5W6F
CLSA-2026-1781605589
CLSA-2026-1781605653
CLSA-2026-1781606022
CLSA-2026-1781606042
CLSA-2026-1782314022
CLSA-2026-1782720378
CLSA-2026-1790182513
ECHO-0D78-6C28-581D
OESA-2026-2386
OESA-2026-2387
OESA-2026-2388
OESA-2026-2389
OESA-2026-2463
OPENSUSE-SU-2026:11061-1
OPENSUSE-SU-2026:21071-1
SUSE-SU-2026:22378-1
SUSE-SU-2026:2580-1
SUSE-SU-2026:2877-1
SUSE-SU-2026:3023-1
SUSE-SU-2026:3024-1
Found an issue in the description? Have something to add? Feel free to write us 👾