CVE-2026-46520
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
In ImageMagick prior to versions 6.9.13-48 and 7.1.2-23, an out-of-bounds heap write vulnerability exists when reading multiple images with different dimensions. This issue has been fixed in the mentioned versions.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code or cause a system crash, potentially leading to data integrity compromise or service disruption.
Recommendation
Immediately update ImageMagick to version 6.9.13-48 or 7.1.2-23 or later.
Original NVD description (English source)
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-48 and 7.1.2-23, when reading multiple images with different dimensions an out of bounds heap write can occur. This issue has been patched in versions 6.9.13-48 and 7.1.2-23.