CVE Catalog
CVE-2026-46557
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk0.01%
2th percentile — higher than 2% of all known CVEs
Summary
ImageMagick prior to version 7.1.2-23 has a vulnerability that can lead to a stack overflow in the fx operation due to a missing depth check when passing a crafted argument.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access or execution of malicious code, posing a serious security threat to the system.
Recommendation
It is recommended to upgrade ImageMagick to version 7.1.2-23 or later to mitigate this vulnerability.
Original NVD description (English source)
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-23, due to a missing depth check a stack overflow can occur in the fx operation by passing a crafted argument. This issue has been patched in version 7.1.2-23.