CVE-2026-86423

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-30 ImageMagick versions 6.9.x prior to 6.9.13-55

Description A heap-use-after-free issue exists in the GetList() method of PerlMagick. A heap-use-after-free occurs when an application continues to use a pointer after the memory it points to has been freed. A crafted call to the GetList() method can trigger this condition, leading to a crash and resulting in a denial of service.

Recommendations Update to version 7.1.2-30 or later. Update to version 6.9.13-55 or later. As a temporary workaround, restrict the use of the GetList() method in PerlMagick.