Skip to content
← Vulnerability catalog
OFFICIAL CVE RECORD4.8 Medium

CVE-2026-86423

ImageMagick before 7.1.2-30 Heap-use-after-free via GetList

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. A crafted call to the GetList method can trigger the use-after-free, resulting in a crash (denial of service).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ImageMagick ImageMagick

Default version status: unaffected

  • 7.0.0 to < 7.1.2-30affected
  • 7.1.2-30unaffected

ImageMagick ImageMagick

Default version status: unaffected

  • 0 to < 6.9.13-55affected
  • 6.9.13-55unaffected

References