Skip to content
← Vulnerability catalog
OFFICIAL CVE RECORD4.8 Medium

CVE-2026-86425

ImageMagick before 7.1.2-30 Heap-use-after-free via Layer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. An attacker who supplies a crafted list of images can trigger memory access after deallocation, resulting in a crash (denial of service).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ImageMagick ImageMagick

Default version status: unaffected

  • 7.0.0 to < 7.1.2-30affected
  • 7.1.2-30unaffected

ImageMagick ImageMagick

Default version status: unaffected

  • 0 to < 6.9.13-55affected
  • 6.9.13-55unaffected

References