Skip to content
CVE PROGRAM SOURCE RECORD6.2 Medium

CVE-2026-40169

ImageMagick: Heap buffer overflow (WRITE) in the YAML and JSON encoders

Description

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below 7.1.2-19, a crafted image could result in an out of bounds heap write when writing a yaml or json output, resulting in a crash. This issue has been fixed in version 7.1.2-19.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ImageMagick ImageMagick

  • < 7.1.2-19affected

References