Heap Memory Disclosure in ImageMagick GIF Decoder by ImageMagick

CVE-2026-102635

What is CVE-2026-102635?

ImageMagick versions prior to 7.1.2-32 and 6.9.13-57 are susceptible to a security issue stemming from uninitialized heap memory disclosures via the GIF decoder’s application extension handler in coders/gif.c. By crafting malicious GIF files, an attacker could manipulate the number parser, leading to the exposure of sensitive heap information stored as image metadata, potentially compromising user data.

References