Integer Overflow Vulnerability in ImageMagick Software by ImageMagick
CVE-2026-62946

5.1MEDIUM

Key Information:

Vendor

Imagemagick
Status
Imagemagick
Vendor
CVE Published:
30 July 2026

What is CVE-2026-62946?

ImageMagick, an open-source tool for image editing, is susceptible to an integer overflow vulnerability on 32-bit platforms. This occurs when processing extraordinarily large JNX files, potentially allowing attackers to perform a heap buffer overwrite. Users are strongly recommended to upgrade to the latest versions, 6.9.13-52 or 7.1.2-27, which mitigate this issue and enhance overall security.

Affected Version(s)

ImageMagick < 7.1.2-27 < 7.1.2-27

ImageMagick < 6.9.13-52 < 6.9.13-52

References

https://github.com/ImageMagick/ImageMagick/security/advis...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.