CVE-2026-48724

MediumCVSS 5.5

Published: 10/06/2026(UTC)Updated: 11/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.01%

2th percentile — higher than 2% of all known CVEs

Summary

ImageMagick prior to version 7.1.2-24 has a heap buffer over-write vulnerability when using an image with a mask with the Floyd-Steinberg dithering method.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory access, posing a risk to system integrity.

Recommendation

It is recommended to upgrade to version 7.1.2-24 or later to mitigate this vulnerability.

Original NVD description (English source)

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-24, when using an image with mask the Floyd-Steinberg dithering method it will cause a negative heap buffer over-write. This issue has been patched in version 7.1.2-24.