CVE-2026-42326
MediumCVSS 5.1Exploitation Probability (EPSS)
Low risk2th percentile — higher than 2% of all known CVEs
Summary
ImageMagick prior to versions 6.9.13-47 and 7.1.2-22 had a vulnerability that allowed an out of bounds read when writing an IPTC output file. This issue has been patched in the mentioned versions.
Risk Assessment
Exploitation of this vulnerability through a malicious input file could lead to unauthorized memory reads, posing a risk of data leakage.
Recommendation
It is recommended to update ImageMagick to versions 6.9.13-47 or 7.1.2-22 to mitigate this vulnerability.
Original NVD description (English source)
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, when writing an IPTC output file a malicious input file could cause an out of bounds read of a single byte. This issue has been patched in versions 6.9.13-47 and 7.1.2-22.