Heap Buffer Over-read Vulnerability in ImageMagick DJVU Image Format Handler
CVE-2026-27799
4MEDIUM
What is CVE-2026-27799?
ImageMagick, a widely-used open-source software for digital image manipulation, has a vulnerability affecting its DJVU image format handler. This issue arises from integer truncation during the stride calculation for pixel buffer allocation, leading to potential out-of-bounds memory reads. The vulnerability has been patched in versions 7.1.2-15 and 6.9.13-40, but users of earlier versions are at risk of exploitation.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
ImageMagick < 6.9.13-40 < 6.9.13-40
ImageMagick >= 7.0.0, < 7.1.2-15 < 7.0.0, 7.1.2-15