Integer Overflow Vulnerability in ImageMagick Affecting Multiple Versions
CVE-2026-28693

8.1HIGH

Key Information:

Vendor

Imagemagick
Status
Imagemagick
Vendor
CVE Published:
9 March 2026

What is CVE-2026-28693?

ImageMagick, a free and open-source software tool used for editing and manipulating digital images, is affected by an integer overflow vulnerability in its DIB coder component. This issue, present in versions prior to 7.1.2-16 and 6.9.13-41, can lead to out-of-bounds read or write operations, potentially compromising the integrity and security of image processing tasks. Users are advised to update to the latest versions to mitigate this vulnerability.

Affected Version(s)

ImageMagick >= 7.0.0, < 7.1.2-16 < 7.0.0, 7.1.2-16

ImageMagick < 6.9.13-41 < 6.9.13-41

References

https://github.com/ImageMagick/ImageMagick/security/advis...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.