Race Condition Vulnerability in ImageMagick Products
CVE-2026-109279
2LOW
What is CVE-2026-109279?
ImageMagick versions prior to 6.9.13-57 and 7.x before 7.1.2-32 are susceptible to a race condition vulnerability stemming from improper synchronization when accessing the security policy. This flaw allows simultaneous read and write operations from multiple threads, which can lead to a heap buffer overwrite. An attacker exploiting this vulnerability may induce concurrent access, resulting in application crashes and denial of service, effectively disrupting normal operations.
Affected Version(s)
ImageMagick 7.0.0-0 < 7.1.2-32
ImageMagick 0 < 6.9.13-57
ImageMagick 7.1.2-32